[vorpalhex]

In AWS you use a mix of private and public subnets within a single VPC.

Not sure best practice for DO since I haven't tried their VPC setup but it doesn't appear to have a way to let two VPCs interact yet.