yeah that's pretty much the idea, act as a de-facto gateway for internet traffic while avoiding redirects of the private address space