How to setup a Laravel app deployed to Vapor to hit 2 resources over the network on client's site?

We have an app we're considering deploying on Laravel Vapor. The app it self is fine, nothing special, Vapor compatible. However, the app needs to hit two resources over the network on prem at the client site. One is subscribing to a Kafka topic and the other is a rest API.

Traditionally, we have deployed this by setting up an IPSec tunnel, then adding a route to their resources over the tunnel. The app server never cares or sees this as this tunnel and route is done on the firewall upstream.

With Laravel Vapor, the way it sets all the pieces up. Is it 'clean' and straightforward to add a Site to Site VPN into however Vapor sets up the pieces?

Thanks in advance.