&gt; [...] but some people just want to say &quot;these don&#x27;t have a public IP, so it checks off this box&quot; and those people are going to be super happy with this.<p>Which basically would mean that they are incompetent. A private IP address doesn&#x27;t really do anything for you security-wise. An IP address being private is simply a convention adhered to by people assigning addresses--that does not in any way guarantee that one cannot send packets to those addresses from outside your network or forward packets from those addresses out of your network, so it doesn&#x27;t obviate the need for you to filter at the borders of your network, and if you do filter, you might as well filter &quot;public addresses&quot;.<p>The only difference between private and public addresses is that private addresses are potentially assigned to more than one network&#x2F;machine, which makes it difficult to make those networks&#x2F;machines communicate with one another in case you ever need to, and to make the world communicate with them because the world in general can&#x27;t distinguish between the multiple instances of the same address, and thus usually doesn&#x27;t really know who to talk to.