We do this for a large percentage of our customers without issue. We route public subnets to customer specific firewalls which then translate those addresses to internal hosts:

You are doing NAT. I know this is customary in commercial internet practice but in HAMNET/AMPRnet we don't like NAT.

(too much time is wasted by debugging the issues caused by inserting NAT into networks that also have direct routing)

Rob