检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
What Are the Relationships and Differences Between the CIDR Blocks in a NAT Gateway and in an SNAT Rule? When creating a NAT gateway, you must specify the VPC and subnet CIDR block for the NAT gateway. This CIDR block can only be used by the system.
Overview A single NAT gateway supports up to one million SNAT connections and 20 Gbit/s of bandwidth. If one NAT gateway cannot meet your requirements, you can use multiple NAT gateways. This topic describes how to deploy multiple public NAT gateways.
NAT gateway traffic refers to the traffic between a NAT gateway and the Internet. It can be protected in two scenarios: If the EIP bound to the NAT gateway is used to connect to the Internet, CFW protects all traffic passing through the NAT gateway.
Configuring a Public NAT Gateway Buy a public NAT gateway. Select VPC A for VPC. For details about how to configure other parameters, see Buying a Public NAT Gateway. Add an SNAT rule. Select VPC for Scenario and subnet A for Subnet. For more details, see Adding an SNAT Rule.
Procedure Go to the public NAT gateway list page. Click the name of the public NAT gateway. On the public NAT gateway details page, click the DNAT Rules tab.
Procedure Go to the private NAT gateway list page. On the Private NAT Gateways page, click the name of the private NAT gateway. On the private NAT gateway details page, click the DNAT Rules tab.
Procedure Go to the public NAT gateway list page. Click the name of the public NAT gateway. In the SNAT rule list, locate the row that contains the SNAT rule you want to delete and click Delete in the Operation column. Enter DELETE in the displayed dialog box and click OK.
Procedure Go to the private NAT gateway list page. On the Private NAT Gateways page, click the name of the private NAT gateway. In the SNAT rule list, locate the row that contains the SNAT rule you want to delete and click Delete in the Operation column.
Constraints You can create an SNAT rule only when status of the NAT gateway is ACTIVE and admin_state_up of the NAT gateway administrator is True. Calling Method For details, see Calling APIs.
Constraints You can create a DNAT rule only when status of the NAT gateway is ACTIVE and admin_state_up of the NAT gateway administrator is True. Specify either port_id or private_ip at a time.
} nat:transitIps:get √ √ Querying Transit IP Addresses GET /v3/{project_id}/private-nat/transit-ips nat:transitIps:list √ √ Releasing a Transit IP Address DELETE /v3/{project_id}/private-nat/transit-ips/{transit_ip_id} nat:transitIps:delete √ √ Parent Topic: Permissions Policies and
For pricing details about public NAT gateways, see Product Pricing Details. To top up an account, see Topping Up an Account (Prepaid Direct Customers). Parent topic: Using Multiple Public NAT Gateways Together in Performance-Demanding Scenarios
Procedure Go to the public NAT gateway list page. Click the name of the public NAT gateway. On the public NAT gateway details page, click the DNAT Rules tab. In the DNAT rule list, select DNAT rules that you no longer need and click Delete DNAT Rule.
Step 2: Create a Public NAT Gateway Go to the Buy Public NAT Gateway page. On the Buy Public NAT Gateway page, configure required parameters.
Adding an SNAT Rule Go to the public NAT gateway list page. On the displayed page, click the name of the public NAT gateway on which you need to add an SNAT rule. On the SNAT Rules tab, click Add SNAT Rule. Figure 1 Add SNAT Rule Configure required parameters.
On the Private NAT Gateways page, click the name of the private NAT gateway on which you need to add an SNAT rule. On the SNAT Rules tab, click Add SNAT Rule. Configure required parameters. For details, see Table 1.
Prerequisites A private NAT gateway is available. A transit IP address is available. Procedure Go to the private NAT gateway list page. On the Private NAT Gateways page, click the name of the private NAT gateway on which you need to add a DNAT rule.
A maximum of 200 DNAT rules can be added on a public NAT gateway. Procedure Go to the public NAT gateway list page. On the displayed page, click the name of the public NAT gateway on which you need to add a DNAT rule.
SNAT Rules Querying SNAT Rules Creating an SNAT Rule Updating an SNAT Rule Querying Details of an SNAT Rule Deleting an SNAT Rule Parent Topic: APIs of Public NAT Gateways
DNAT Rules Querying DNAT Rules Updating a DNAT Rule Creating a DNAT Rule Deleting a DNAT Rule Querying Details About a Specified DNAT Rule Parent Topic: APIs for Private NAT Gateways
