Easily allow connectivity for internal resources
Route traffic to the internet for your VMs without compromising their privacy and security
A single & secure entrance to your infrastructure.
Route traffic to the internet for your VMs without compromising their privacy and security
Decrease outside exposure and reduce IP reservation costs. Your infrastructure will share a single external IP address.
Setup, administration, failover & updates are covered for maximum reliability and minimal impact on your traffic.
NAT
Enable access between your private network and the internet using dynamic and static rules.
Bastion
Enable and control SSH connections for your developers and system admin tasks
Gateway to Private Networks
Up to 8 Private Networks per Public Gateway.
Egress
Egress included
Use SSH bastion to allow or deny SSH access to the resources in your Private Network, so as Lead Developer, you can control who has access to which VMs.
Allow only the machines in your private network to have access to an external network and answer the request on that network
Optimize your IP usage by having a public gateway to mutualize the frontal IP for multiple VMs
Public gateways sit at the border of private networks. They deal with traffic entering and exiting the network (NAT).
A public gateway can be attached to up to 8 private networks and up to 50 Public Gateways are supported per Organization.
The public gateway can be configured through the console or the API.
No, it doesn’t. A public IPv4 address (aka flexible IP) must be assigned to the public gateway when you create it, but you can detach it and delete it afterward if you don’t want to use the NAT feature.
No, you don’t. The Public Gateway will communicate automatically with all the instances in place within the Private Network thanks to the DHCP server
Yes, it can. With NAT enabled, the public gateway shares its public IPv4 address (aka. flexible IP) with the Instances attached to the private network, so that they can access the Internet.
Moreover, the public gateway supports static NAT (aka. port forwarding), so that ingress traffic from the public Internet can reach Instances on the private network. This works by mapping pre-defined ports of the public IP address of the gateway to specific ports and IP addresses on the private network.