I don't want to put the ESXi host over the internet, but the problem is that I don't have access to the physical router. 

If I configure a router as a VM and disable the ESXi host public IP address, I won't be able to access the ESXi host if the router VM fails.