The are stack should not be public… there should at most be one public ip for that.