Our network is completely software defined, so we just fake it to the VM and make it look like it's talking right to the service, and do all the routing via magic.