Azure NAT Gateway

AzureNetworking

Managed outbound internet SNAT service for VMs in subnets, providing scalable up-to-64,000 simultaneous flows per assigned public IP, deterministic SNAT port exhaustion behaviour, and availability-zone isolation without managing VPN or load balancer rules

Jurisdictional exposure

Provider HQ
USRedmond, USA

Subject to CLOUD Act, FISA-702, DPF

Region locations
APACCNEEAEUUKUSOther74 regions across 7 jurisdictions
Sovereign option
Yes — 13 sovereign-flagged regions available

Attributes

SLA Uptime
99.99%

Sub-services (2)

Public IP Attachment

Attach up to 16 public IPs or a /28 public-IP prefix for outbound SNAT

Configurable Idle Timeout

Per-NAT idle timeout from 4 to 120 minutes for long-lived outbound flows

Compliance & Certifications

This service is attested for the following frameworks. Always verify with the provider before relying on a specific compliance posture.

Where this runs

74 regions
36 countries
13sovereign
Sovereign regions (13)
  • Australia Central · CanberraAzure Australia Government
  • Australia Central 2 · CanberraAzure Australia Government
  • US Gov Virginia · VirginiaAzure Government (US)
  • US Gov Arizona · ArizonaAzure Government (US)
  • US Gov Texas · TexasAzure Government (US)
  • US DoD East · VirginiaAzure Government (US DoD regions)
  • US DoD Central · IowaAzure Government (US DoD regions)
  • China North (Beijing) · BeijingMicrosoft Azure operated by 21Vianet
  • China East (Shanghai) · ShanghaiMicrosoft Azure operated by 21Vianet
  • China North 2 · BeijingMicrosoft Azure operated by 21Vianet
  • China East 2 · ShanghaiMicrosoft Azure operated by 21Vianet
  • China North 3 · HebeiMicrosoft Azure operated by 21Vianet
  • China East 3 · ShanghaiMicrosoft Azure operated by 21Vianet
Commercial regions (61)

Europe (21)

  • Austria East
  • Belgium Central
  • Denmark East
  • Finland Central
  • France South
  • France Central
  • Germany North
  • Germany West Central
  • Greece Central
  • North Europe
  • Italy North
  • West Europe
  • Norway East
  • Norway West
  • Poland Central
  • Spain Central
  • Sweden Central
  • Switzerland West
  • Switzerland North
  • UK West
  • UK South

North America (13)

  • Canada East
  • Canada Central
  • Mexico Central
  • West US
  • East US 3
  • North Central US
  • Central US
  • West US 3
  • South Central US
  • East US
  • East US 2
  • West US 2
  • West Central US

South America (3)

  • Brazil Southeast
  • Brazil South
  • Chile Central

Asia (14)

  • East Asia
  • South India
  • India South Central
  • Jio India West
  • West India
  • Jio India Central
  • Central India
  • Indonesia Central
  • Japan West
  • Japan East
  • Malaysia West
  • Southeast Asia
  • Korea South
  • Korea Central

Oceania (3)

  • Australia East
  • Australia Southeast
  • New Zealand North

Middle East (5)

  • Israel Central
  • Qatar Central
  • Saudi Arabia Central
  • UAE Central
  • UAE North

Africa (2)

  • South Africa West
  • South Africa North

Tags

Equivalent services on other platforms

Amazon VPCAWS

Isolated virtual network for launching AWS resources with subnets, route tables, security groups, NACLs, NAT gateways, VPC peering, and Transit Gateway for hub-and-spoke

Cloud NATGCP

Distributed, managed network address translation that lets private-IP-only Compute Engine, GKE, and Cloud Run resources reach the internet without public IPs, with configurable port allocation, endpoint-independent mapping, and per-region scale-out

IBM Cloud VPCIBM

Software-defined virtual private cloud with generation-2 infrastructure, subnets, security groups, network ACLs, Transit Gateway integration, dedicated floating IPs, and isolated multi-zone regions across IBM Cloud global infrastructure

IONOS Managed NAT GatewayIONOS

Managed source NAT gateway giving VMs on private LANs outbound internet access without inbound exposure, supporting TCP, UDP and ICMP, multiple public IPs and SNAT rules, up to six private networks per gateway, high-availability operation and flow logs.

Leaf NetworkingLeaf

Private networks, routers, floating IPs, security groups, and load-balancing — OpenStack Neutron-backed. The networking primitives stitching together Leaf VMs and Kubernetes clusters.

OpenStack NeutronOpenStack

Network-as-a-service component covering virtual networks, subnets, routers, floating IPs, security groups, and pluggable backends for OVS, OVN, Linux bridge, or vendor SDN integrations — equivalent to VPC / Virtual Network / VPC across the hyperscalers

Virtual Cloud NetworkOracle

Software-defined networking for OCI resources with regional VCNs, subnets, security lists, route tables, internet and NAT gateways, and VCN peering

NAT GatewayT Cloud

Managed SNAT and DNAT gateway giving ECS and BMS instances in a VPC internet access without their own elastic IPs, in several sizes, billed hourly on a pay-as-you-go basis

Outscale Net (VPC)Outscale

Virtual private network with subnets, route tables, NAT services, internet gateways, and VPC peering. AWS VPC-compatible API. Net is the network primitive every other Outscale IaaS service runs inside.

OVHcloud Public Cloud GatewayOVHcloud

Managed outbound NAT gateway for Public Cloud private networks, providing internet egress for workloads without public IPs and central source-NAT for subnet-wide traffic

Scaleway Public GatewayScaleway

Managed gateway providing NAT internet egress for Private Network workloads, static NAT (port forwarding), an SSH bastion with allowed-IP lists, and default-route advertisement; IPv4 only. DHCP and DNS are now provided by Private Networks

UpCloud NAT GatewayUpCloud

Managed NAT gateway giving servers on SDN private networks outbound internet access without public IP addresses

Pricing

Pricing model:pay-as-you-go