检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
What Are the Relationships and Differences Between the CIDR Blocks in a NAT Gateway and in an SNAT Rule? When creating a NAT gateway, you must specify the VPC and subnet CIDR block for the NAT gateway. This CIDR block can only be used by the system.
ALM-4285603840 NAT Packet Discard Description NAT/4/NAT_PACKET_DISCARD: OID [OID] Interface [OCTET] had discarded packets, due to lack of mapping space when NAT is out of addresses. The NAT address pool resources are insufficient.
Overview A single NAT gateway supports up to one million SNAT connections and 20 Gbit/s of bandwidth. If one NAT gateway cannot meet your requirements, you can use multiple NAT gateways. This topic describes how to deploy multiple public NAT gateways.
Configuring a Public NAT Gateway Buy a public NAT gateway. Select VPC A for VPC. For details about how to configure other parameters, see Buying a Public NAT Gateway. Add an SNAT rule. Select VPC for Scenario and subnet A for Subnet. For more details, see Adding an SNAT Rule.
NAT gateway traffic refers to the traffic between a NAT gateway and the Internet. It can be protected in two scenarios: If the EIP bound to the NAT gateway is used to connect to the Internet, CFW protects all traffic passing through the NAT gateway.
Buy an EIP and configure a public NAT gateway. Buy an EIP in the CN-Hong Kong region. For details, see Assigning an EIP. Buy a public NAT gateway. For details about how to configure other parameters, see Buying a Public NAT Gateway.
Procedure Go to the public NAT gateway list page. Click the name of the public NAT gateway. On the public NAT gateway details page, click the DNAT Rules tab.
Procedure Go to the private NAT gateway list page. On the Private NAT Gateways page, click the name of the private NAT gateway. On the private NAT gateway details page, click the DNAT Rules tab.
Procedure Go to the public NAT gateway list page. Click the name of the public NAT gateway. In the SNAT rule list, locate the row that contains the SNAT rule you want to delete and click Delete in the Operation column. Enter DELETE in the displayed dialog box and click OK.
Procedure Go to the private NAT gateway list page. On the Private NAT Gateways page, click the name of the private NAT gateway. In the SNAT rule list, locate the row that contains the SNAT rule you want to delete and click Delete in the Operation column.
} nat:transitIps:get √ √ Querying Transit IP Addresses GET /v3/{project_id}/private-nat/transit-ips nat:transitIps:list √ √ Releasing a Transit IP Address DELETE /v3/{project_id}/private-nat/transit-ips/{transit_ip_id} nat:transitIps:delete √ √ Parent Topic: Permissions Policies and
Constraints You can create an SNAT rule only when status of the NAT gateway is ACTIVE and admin_state_up of the NAT gateway administrator is True. Calling Method For details, see Calling APIs.
See the NAT Gateway console for the actual prices.To avoid incurring any unnecessary fees, you are advised to delete any private NAT gateways that you no longer need. For more information about private NAT gateways, see What Is NAT Gateway?
For pricing details about public NAT gateways, see Product Pricing Details. To top up an account, see Topping Up an Account (Prepaid Direct Customers). Parent topic: Using Multiple Public NAT Gateways Together in Performance-Demanding Scenarios
Constraints You can create a DNAT rule only when status of the NAT gateway is ACTIVE and admin_state_up of the NAT gateway administrator is True. Specify either port_id or private_ip at a time.
Step 2: Create a Public NAT Gateway Go to the Buy Public NAT Gateway page. On the Buy Public NAT Gateway page, configure required parameters.
Procedure Go to the public NAT gateway list page. Click the name of the public NAT gateway. On the public NAT gateway details page, click the DNAT Rules tab. In the DNAT rule list, select DNAT rules that you no longer need and click Delete DNAT Rule.
Adding an SNAT Rule Go to the public NAT gateway list page. On the displayed page, click the name of the public NAT gateway on which you need to add an SNAT rule. On the SNAT Rules tab, click Add SNAT Rule. Figure 1 Add SNAT Rule Configure required parameters.
On the Private NAT Gateways page, click the name of the private NAT gateway on which you need to add an SNAT rule. On the SNAT Rules tab, click Add SNAT Rule. Configure required parameters. For details, see Table 1.
Prerequisites A private NAT gateway is available. A transit IP address is available. Procedure Go to the private NAT gateway list page. On the Private NAT Gateways page, click the name of the private NAT gateway on which you need to add a DNAT rule.
