ποΈ About NAT Gateways
A Network Address Translation (NAT) gateway is a networking component in cloud and on-premises environments that enables resources within a private subnet (such as virtual machines or containers) to connect to the internet or other external networks, without exposing these resources directly to incoming connections from those external networks. This helps in enhancing security in cloud infrastructure by keeping resources in private subnets isolated from direct public access.
ποΈ Viewing NAT Gateways
You can view the list of NAT Gateways along with their relevant details, enabling easy monitoring and management of configured network connectivity resources.
ποΈ Viewing NAT Gateways Details
You can view and validate the gateway's settings, monitor its performance, and manage it more effectively.
ποΈ Starting and Stopping a NAT Gateway
You can control a NAT gatewayβs operational state by starting or stopping the virtual router that provides NAT services. Start the virtual router to enable network address translation, route traffic between connected networks, and restore network connectivity. Stop the virtual router when you perform maintenance, apply configuration changes, or temporarily disable NAT services to conserve resources and troubleshoot network issues.
ποΈ Viewing NAT Gateway Instances
A NAT Gateway enables private instances in a virtual network to access the internet without assigning them public IP addresses. Viewing a NAT Gateway instance helps you verify its configuration and status, ensuring secure and reliable outbound internet connectivity.
ποΈ Managing IPv4 Addresses
Each virtual gateway comes with a default IPv4 address that belongs to the Virtual Gateway governing the network. The default (source - NAT) IPv4 address can be used to access the Virtual Gateway publicly or via Remote Access (RA) VPN
ποΈ Managing NAT Gateway Operations
You can perform the following operations in the Operations section:
ποΈ Port Forwarding with Public IP
In Apiculus cloud platform, an additional public IP enables you to expose internal services hosted on virtual machines (VMs) to the internet by creating dedicated port forwarding rules. This approach is especially useful when multiple external IPs are needed for services such as SSH, HTTP, or custom applications. By assigning specific public IPs to particular services or VMs, you can achieve greater control, flexibility, and network segmentation.
ποΈ Port Forwarding for VM via VNF
This section outlines the steps to configure port forwarding for a Virtual Machine (VM) using a Virtual Network Function (VNF) in a cloud environment. Port forwarding allows external clients to securely access services (for example SSH, HTTP) hosted on the VM by mapping ports from the VNFβs public IP to the VMβs private IP. This approach improves network segmentation and control by routing all incoming traffic through the VNF layer.