# What would be the pitfalls of Mesh ingress over public internet

**URL:** <https://forum.ansible.com/t/what-would-be-the-pitfalls-of-mesh-ingress-over-public-internet/4352>\
**Category:** Get Help\
**Created:** [March 13, 2024, 10:34am UTC](https://forum.ansible.com/t/what-would-be-the-pitfalls-of-mesh-ingress-over-public-internet/4352 "2024-03-13T10:34:30Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![MalfuncEddie](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/malfunceddie/32/428_2.png) [@MalfuncEddie](https://forum.ansible.com/u/MalfuncEddie)\
**Post date:** [March 13, 2024, 10:34am UTC](https://forum.ansible.com/t/what-would-be-the-pitfalls-of-mesh-ingress-over-public-internet/4352/1 "2024-03-13T10:34:30Z")

</div>

Hi,

With the new Mesh ingress and assuming that the receptor network is fully TLS. What would be a reason not have execution nodes connect to the control plane over the big bad internet.

Currently we always have a vpn but I see no technical reason why it should not work securely over the big bad internet. I always demanded a VPN but this is not for technical reasons.