What do you guys recommend? External URL and set restricting URLs? proxy pass in ingress / with ingress route? Any examples?