[wmf]

Yeah, most people assume that pods are not exposed to the Internet so you'd probably want to block that. But using GUA addresses for pods is a good idea because it eliminates NAT and overlapping IPs.