Great work on launching this product. Overall I am a big fan of the work that you do.
And when going through the architecture I was expecting something along the lines of not requiring a gateway in the private network.
Ie the worker would be in the target network but when a user wants to get in then the controller asks the worker to initiate the connection through an external public bridge.
Internet | VPC User --> Bridge <--- Worker. ---> Target system --> Ctrl. <----
This way we would not have to expose the VPC to the internet through a public address and adding access to new system doesn’t require exposing to the internet, just requires outbound network access from worker to bridger.
Anyway probably something you already thought about and that’s maybe over-complicated for a v0. Would be curious if that’s on your roadmap or if the cost of building this is too high vs benefits.