cloud-config: handle routes and nat