Got some time to go through Phil's github and one of the things he referred to was Hashicorp's implementation :) one from where I started this journey!)

Very interesting! I was playing with katran sometime back and got exposed to all the goodness. But, DSR for public ip seems to be deeply buried within cloud provider's networking stack. Curious how you get around it? What's the deployment topology in public cloud setup?