Converge Cloud NAT Gateway interacts with several network products to provide flexible and secure public network access for CVM instances.
EIP (Elastic IP)
The NAT Gateway and EIPs are two ways for a CVM instance to access the public network. You can use either or both in your public network architecture.
Method 1: Using NAT Gateway Only
- CVM instances without a public IP access the public network through the NAT Gateway’s public IP.
- Traffic to the public network is forwarded via the private network to the NAT Gateway.
Method 2: Using EIP Only
- CVM instances access the public network directly using EIPs, without a NAT Gateway.
- Traffic to the public network is forwarded from the EIP.
Method 3: Using NAT Gateway and EIP
- CVM instances are bound with an EIP, and the route table directs all subnet traffic to the public network through the NAT Gateway.
- Traffic from the CVM to the public network goes through the NAT Gateway via the private network, and response packets return through the NAT Gateway.
- To use the EIP for public network access, you can adjust the priorities of NAT Gateways and EIPs.
- Traffic from the public network that uses the EIPs to access CVMs will have the CVM response packets returned through the EIPs.
Note:
For more information about EIPs, see the Elastic IP product documentation.
Bandwidth Package
- If a NAT Gateway is bound with multiple EIPs, you can add them to an IP bandwidth package.
- This allows bandwidth sharing across multiple IPs and helps reduce public network costs.
Note:
For more details, see the Converge Cloud Product Overview.
Other Related Products
| Product Name | Relationship with NAT Gateway |
|---|---|
| CVM | NAT Gateway and EIP are two ways for CVM instances to access the Internet |
| EIP | EIP and NAT Gateway are two ways for CVM instances to access the Internet |
| VPC | NAT Gateway is part of the VPC |
| Route Table | After creating a NAT Gateway, configure routing policies to direct subnet traffic to the NAT Gateway |
| Public Gateway | A CVM with forwarding enabled; can be accessed by NAT Gateway |
| Anti-DDoS Pro | Can be bound to a NAT Gateway to defend against DDoS and CC attacks |
| Network ACL | Allows fine-grained control over inbound and outbound traffic of subnets |