discrimiNAT firewall for egress filtering by FQDNs on Google Cloud. Architecture with internal TCP load balancers as next hops.