Christian Huitema on Nostr: I am sure that you are designing all that carefully. When I was at Microsoft, we ...

I am sure that you are designing all that carefully. When I was at Microsoft, we developed something called "domain isolation" that used IPSEC to create a secure virtual network, so I see where you are coming from. Advantage is to reduce outside noise, and also protect legacy apps. But our IPSEC solution was later more or less abandoned in favor of just doing HTTPS from client to cloud.