Show different approaches for Bastion service in multi-tier architectures