AD Cloud Hosting

Hi,
I would like to setup an Active Directory from a Cloud Hosting. I know using Active Directory with a public IP is a bad idea. Install VPN on the same server will have conflicts with the AD policys (RRAS). So the question. It is possible to whitlist my clients, that only my clients can connect to the public ip from my AD? Other has someone another solution?