Back to split bastion and NAT instances