Right now I’m solving this by having two separate ingress controllers in one cluster - one for private stuff only available over a vpn, and one only available over public ips.

How’s this working out? What kinda alternatives are there with a single cluster?

I need tea but luckily it’s not grown in UK

Good point about the evaporation! Yes any energy flowing away along the wires is away from heating the water. Though how significant this is, dunno.

Looks cool, but the article didn’t really discuss the technology at all. E.g. It would have been nice to know how much weather and waves these can handle.