AMA: Microsoft Connected Cache and Delivery Optimization

Hi Andy and Microsoft team, may I know how the traffic flows? Initially, I intended to restrict incoming traffic from the internet to my MCC server. Based on my understanding, I can configure my firewall to only allow traffic from AS8075. Or do I actually need to allow incoming traffic from anywhere? Please correct me if I’m wrong. I basically work at an IXP with around 700+ ASNs and am looking to add MCC into my network.