Managed SNAT and DNAT gateway giving ECS and BMS instances in a VPC internet access without their own elastic IPs, in several sizes, billed hourly on a pay-as-you-go basis

Jurisdictional exposure

Provider HQ
EUBonn, Germany

Subject to GDPR, Data Act, DGA

Region locations
EEAEU3 regions across 2 jurisdictions
Sovereign option
Yes — 3 sovereign-flagged regions available

Sub-services (3)

SNAT

Shared outbound internet access for ECS and BMS instances via an EIP

DNAT

Port mapping that exposes VPC instances to inbound internet traffic

Private NAT Gateway

Address translation between private networks, available in EU-DE

Compliance & Certifications

This service is attested for the following frameworks. Always verify with the provider before relying on a specific compliance posture.

Where this runs

3 regions
3 countries
3sovereign
Sovereign regions (3)
  • EU-DE - Biere / Magdeburg · BiereT Cloud Public Sovereign
  • EU-NL - Amsterdam · AmsterdamT Cloud Public Sovereign
  • EU-CH2 - Switzerland · BernT Cloud Public Sovereign (Swiss SKU)

Tags

Equivalent services on other platforms

Amazon VPCAWS

Isolated virtual network for launching AWS resources with subnets, route tables, security groups, NACLs, NAT gateways, VPC peering, and Transit Gateway for hub-and-spoke

Azure NAT GatewayAzure

Managed outbound internet SNAT service for VMs in subnets, providing scalable up-to-64,000 simultaneous flows per assigned public IP, deterministic SNAT port exhaustion behaviour, and availability-zone isolation without managing VPN or load balancer rules

Cloud NATGCP

Distributed, managed network address translation that lets private-IP-only Compute Engine, GKE, and Cloud Run resources reach the internet without public IPs, with configurable port allocation, endpoint-independent mapping, and per-region scale-out

IBM Cloud VPCIBM

Software-defined virtual private cloud with generation-2 infrastructure, subnets, security groups, network ACLs, Transit Gateway integration, dedicated floating IPs, and isolated multi-zone regions across IBM Cloud global infrastructure

IONOS Managed NAT GatewayIONOS

Managed source NAT gateway giving VMs on private LANs outbound internet access without inbound exposure, supporting TCP, UDP and ICMP, multiple public IPs and SNAT rules, up to six private networks per gateway, high-availability operation and flow logs.

Leaf NetworkingLeaf

Private networks, routers, floating IPs, security groups, and load-balancing — OpenStack Neutron-backed. The networking primitives stitching together Leaf VMs and Kubernetes clusters.

OpenStack NeutronOpenStack

Network-as-a-service component covering virtual networks, subnets, routers, floating IPs, security groups, and pluggable backends for OVS, OVN, Linux bridge, or vendor SDN integrations — equivalent to VPC / Virtual Network / VPC across the hyperscalers

Virtual Cloud NetworkOracle

Software-defined networking for OCI resources with regional VCNs, subnets, security lists, route tables, internet and NAT gateways, and VCN peering

Outscale Net (VPC)Outscale

Virtual private network with subnets, route tables, NAT services, internet gateways, and VPC peering. AWS VPC-compatible API. Net is the network primitive every other Outscale IaaS service runs inside.

OVHcloud Public Cloud GatewayOVHcloud

Managed outbound NAT gateway for Public Cloud private networks, providing internet egress for workloads without public IPs and central source-NAT for subnet-wide traffic

Scaleway Public GatewayScaleway

Managed gateway providing NAT internet egress for Private Network workloads, static NAT (port forwarding), an SSH bastion with allowed-IP lists, and default-route advertisement; IPv4 only. DHCP and DNS are now provided by Private Networks

UpCloud NAT GatewayUpCloud

Managed NAT gateway giving servers on SDN private networks outbound internet access without public IP addresses

Pricing

Pricing model:per-instance-hour