Distributed, managed network address translation that lets private-IP-only Compute Engine, GKE, and Cloud Run resources reach the internet without public IPs, with configurable port allocation, endpoint-independent mapping, and per-region scale-out
FluffyStack toolsJurisdictional exposure
Attributes
- SLA Uptime
- 99.99%
Sub-services (3)
NAT Gateways
Per-region, per-subnet NAT with automatic port allocation and scale-out
Static Port Allocation
Deterministic SNAT port mapping for long-running outbound flows
NAT Logging
Flow logs of translations exported to Cloud Logging for audit
Compliance & Certifications
This service is attested for the following frameworks. Always verify with the provider before relying on a specific compliance posture.
Where this runs
Sovereign regions (1)
- T-Systems Sovereign Cloud · FrankfurtT-Systems Sovereign Cloud powered by Google Cloud
Commercial regions (43)
Europe (13)
- Belgium
- Finland
- Paris
- Berlin
- Frankfurt
- Milan
- Turin
- Netherlands
- Warsaw
- Madrid
- Stockholm
- Zurich
- London
North America (12)
- Montréal
- Toronto
- Querétaro
- Northern Virginia
- Columbus
- Iowa
- Dallas
- Las Vegas
- Los Angeles
- South Carolina
- Salt Lake City
- Oregon
South America (2)
- São Paulo
- Santiago
Asia (10)
- Hong Kong
- Delhi
- Mumbai
- Jakarta
- Osaka
- Tokyo
- Singapore
- Seoul
- Taiwan
- Bangkok
Oceania (2)
- Melbourne
- Sydney
Middle East (3)
- Tel Aviv
- Doha
- Dammam
Africa (1)
- Johannesburg
Tags
Equivalent services on other platforms
Isolated virtual network for launching AWS resources with subnets, route tables, security groups, NACLs, NAT gateways, VPC peering, and Transit Gateway for hub-and-spoke
Managed outbound internet SNAT service for VMs in subnets, providing scalable up-to-64,000 simultaneous flows per assigned public IP, deterministic SNAT port exhaustion behaviour, and availability-zone isolation without managing VPN or load balancer rules
Software-defined virtual private cloud with generation-2 infrastructure, subnets, security groups, network ACLs, Transit Gateway integration, dedicated floating IPs, and isolated multi-zone regions across IBM Cloud global infrastructure
Managed source NAT gateway giving VMs on private LANs outbound internet access without inbound exposure, supporting TCP, UDP and ICMP, multiple public IPs and SNAT rules, up to six private networks per gateway, high-availability operation and flow logs.
Private networks, routers, floating IPs, security groups, and load-balancing — OpenStack Neutron-backed. The networking primitives stitching together Leaf VMs and Kubernetes clusters.
Network-as-a-service component covering virtual networks, subnets, routers, floating IPs, security groups, and pluggable backends for OVS, OVN, Linux bridge, or vendor SDN integrations — equivalent to VPC / Virtual Network / VPC across the hyperscalers
Software-defined networking for OCI resources with regional VCNs, subnets, security lists, route tables, internet and NAT gateways, and VCN peering
Managed SNAT and DNAT gateway giving ECS and BMS instances in a VPC internet access without their own elastic IPs, in several sizes, billed hourly on a pay-as-you-go basis
Virtual private network with subnets, route tables, NAT services, internet gateways, and VPC peering. AWS VPC-compatible API. Net is the network primitive every other Outscale IaaS service runs inside.
Managed outbound NAT gateway for Public Cloud private networks, providing internet egress for workloads without public IPs and central source-NAT for subnet-wide traffic
Managed gateway providing NAT internet egress for Private Network workloads, static NAT (port forwarding), an SSH bastion with allowed-IP lists, and default-route advertisement; IPv4 only. DHCP and DNS are now provided by Private Networks
Managed NAT gateway giving servers on SDN private networks outbound internet access without public IP addresses