What would be the difference between putting in a load balancer or reverse proxy on the perimeter to send requests back to a system in our LAN? We don't want to have people NAT directly into the LAN, which is why we're considering putting this extra step in between.
To make things clear the requests are coming from a cloud provider and currently configured to terminate the connection within the LAN. I don't see what a load balancer would give us from a security perspective, but I'm not sure how much more security would be placed with a reverse proxy either. Either way, I'd prefer these connections to be as secure as possible. I'm limiting what the source addresses from the cloud provider can hit, but there might be a need for remote clients to attach as well, which would make things less secure.