are you attaching ingress to the private interface, or public?