Pool, Public IP and Virtual Site
If a customer needs to control egress traffic, to limit egress source to a subset of REs, a Virtual Site must be set. If the origin pool is an IP, the customer has to choose "Private IP", even if the origin pool is a Public IP. That's not obvious....