Thanks for the information.

I'm assuming that I can use a "VIP" bosh network definition to solve this, then put the ip address in as the property. It was relatively easy to define this, but I can't seem to get the security groups correct on AWS to have my client VM see the server VM via the elastic ip address. Has anyone done this? It seems so straightforward, so I have no idea what I'm doing wrong.

My deployment manifest looks like this:

networks:
- name: default
type: dynamic
cloud_properties:
subnet: subnet-xxxxxxx
- name: elasticip
type: vip
cloud_properties: {}

I've also tried adding explicit security groups to the cloud_properties for the vip network, and i've tried adding the subnet.

Then my job area has in it:

networks:
- name: elasticip
static_ips: [52.xx.xx.xx]
- name: default
default: [dns, gateway]

Any ideas on what I'm doing incorrectly? Or am I trying to do something that won't work? I've used the Terraform "tiny" script to set up my deployment of CF (if that in any way gives a clue of what I need to do).