I'm trying to make a Kubernetes service which is reachable from all regions in my VPC but unreachable from outside. I've seen that there is the annotation: "cloud.google.com/load-balancer-type: "Internal"" which creates a regional Load Balancer for the service.

I was thinking about creating a TCP proxy VM in the same region as the Kubernetes cluster. Does anybody know a way to route requests from all the VPC into the Load Balancer or an easy way to create a TCP proxy?