检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
Configuring Protection Rules to Block or Allow NAT Gateway Border Traffic After protection is enabled, CFW allows all traffic by default. You can configure protection rules to block or allow traffic.
Assigning an EIP and Creating a Public NAT Gateway Scenarios This section describes how to assign an EIP and create a public NAT gateway. Procedure Assign an EIP in region A. For details, see Assigning an EIP. Create a public NAT gateway in region A.
How Do I Use a NAT Gateway to Access CSS from the Internet?
One of the VPCs will be used to host a NAT gateway Assign an EIP and create a public NAT gateway in VPC 4. 3 Configuring Networks Create VPC attachments for the enterprise router: Attach the four VPCs to the enterprise router.
Constraints You can create an SNAT rule only when status of the NAT gateway is ACTIVE and admin_state_up of the NAT gateway administrator is True. Calling Method For details, see Calling APIs.
Constraints You can create a DNAT rule only when status of the NAT gateway is ACTIVE and admin_state_up of the NAT gateway administrator is True. Specify either port_id or private_ip at a time.
Table 1 Renewing a yearly/monthly public NAT gateway Method Description Manually renewing a yearly/monthly public NAT gateway You can renew a yearly/monthly NAT gateway on the console anytime before it is automatically deleted.
Constraints You can create DNAT rules in batches only when status of the NAT gateway is ACTIVE and admin_state_up of the NAT gateway administrator is True. Specify either port_id or private_ip at a time.
You can create a DNAT rule only when status of the NAT gateway is ACTIVE and admin_state_up of the NAT gateway administrator is True. URI POST /v2.0/snat_rules Request Table 1 lists the request parameter.
Step 3: Configure a NAT Gateway Buy a public NAT gateway. Click in the upper left corner of the page and choose Networking > NAT Gateway. Click Buy Public NAT Gateway in the upper right corner. Subnet: Select the one you configured as the backend subnet in 2.
Public NAT Gateways Table 1 Public NAT gateway APIs Type Allow You to Public NAT gateways Create, query, update, and delete public NAT gateways, including creating a public NAT gateway, querying public NAT gateways, querying details of a public NAT gateway, updating a public NAT gateway
You can create a DNAT rule only when status of the NAT gateway is ACTIVE and admin_state_up of the NAT gateway administrator is True. Specify either port_id or private_ip at a time.
Table 1 Public NAT gateway operations Operation Resource Type Trace Creating a public NAT gateway natgateway createNatGateway Modifying a public NAT gateway natgateway updateNatGateway Deleting a public NAT gateway natgateway deleteNatGateway Creating a DNAT rule dnatrule createDnatRule
Common Operations Buying a Public NAT Gateway Buying a Private NAT Gateway Adding an SNAT Rule for a Public NAT Gateway Adding an SNAT Rule for a Private NAT Gateway Adding a DNAT Rule for a Public NAT Gateway Adding a DNAT Rule for a Private NAT Gateway O&M and Monitoring Supported
Creating Alarm Rules Scenarios You can set NAT gateway alarm rules to customize the monitored objects and notification policies. Then, you can learn NAT gateway running status in a timely manner. Procedure Log in to the management console.
Step 3: Check the Default Route Scenarios After the public NAT gateway is purchased, go to the route table list, locate the default route table of the VPC where you deploy the public NAT gateway, and check whether there is a default route with the next hop set to the public NAT gateway
If you plan to access NAT gateways through an API, ensure that you are familiar with NAT gateway concepts. For details, see Service Overview. API Calling Welcome to NAT Gateway API Reference.
Notes and Constraints Public NAT Gateway When using a public NAT gateway, note the following: Common restrictions Rules on one public NAT gateway can use the same EIP, but rules on different NAT gateways must use different EIPs.
NAT gateway: a route configured by the system for routing traffic from the VPC subnet to the NAT gateway. NAT gateway Create a public NAT gateway in VPC 4, and add an SNAT rule with an EIP associated.
Overview A single NAT gateway supports up to one million SNAT connections and 20 Gbit/s of bandwidth. If one NAT gateway cannot meet your requirements, you can use multiple NAT gateways. This topic describes how to deploy multiple public NAT gateways.
