for an ingress gateway, the peer is set with allow...
# general
j
for an ingress gateway, the peer is set with allowedips=network subnet