The fastest and easiest option for deploying Horizon Cloud Service is to set up an island tenant.
As shown in the diagram below, all protocol and in-guest traffic traverses through the Horizon Cloud Service gateway into the Horizon Cloud Service tenant. There is no connection between the customer network and the Horizon Cloud Service tenant. All desktop users, published applications, and RDSH servers connect through the Internet. For more information about possible use cases for island tenants, see Choosing Between Integrated and Isolated Active Directory.