I think its worth investigating to see if we can ditch instances altogether and just launch multiple VPCs or subnets to achieve the same desired results of exit-nodes (simple routing and NATing).
note - this only would apply if the control-server and exit-nodes are in the same cloud provider (AWS).