NAT gateway

Q: How deeply does Amazon Web Services in Action, Third Edition: An in-depth guide to AWS cover NAT gateway?

Explains placement, routing, network ACLs, cost, throughput, and availability-zone limits, but does not detail high-availability design.

As explained in Amazon Web Services in Action, Third Edition: An in-depth guide to AWS

A NAT gateway is a managed network gateway that enables resources in a private network to initiate connections to external networks through address translation.

A NAT gateway is a managed AWS gateway that translates traffic from resources in private subnets. It lets those resources initiate internet connections without giving the internet a route into the private subnet. Internet traffic appears to come from the NAT gateway’s public IP address. section 5.5.5 section 5.6

Place the gateway in a public subnet and connect it to private workloads through routing:

Allow the required HTTP, HTTPS, and ephemeral-port traffic through the NAT subnet’s network ACL. section 5.5.5

Private backend with internet access

A web application can keep backend servers in a private 10.0.2.0/24 subnet while placing the NAT gateway in a public 10.0.0.0/24 subnet. The backend can reach external services for outbound work, but internet clients reach it only through the public proxy subnet. section 5.5 section 5.5.5

How Amazon Web Services in Action, Third Edition: An in-depth guide to AWS covers it

Cover of Amazon Web Services in Action, Third Edition: An in-depth guide to AWS

liveBook manning.com

Read Amazon Web Services in Action, Third Edition: An in-depth guide to AWS on liveBook Get the book at manning.com

Also explained in

liveBook manning.com

Terraform in Depth: Infrastructure as Code with Terraform and OpenTofuA NAT gateway is a network component that provides outbound internet access for resources in private subnets without allowing unsolicited inbound internet connections.

Compare how 2 books explain NAT gateway →

Related concepts

network address translationimplements · Network address translation is a networking technique that rewrites IP addresses and often transport-layer ports as traffic crosses a gateway or network boundary.
subnetworkpart of · A subnetwork is a logical subdivision of an IP network with its own address range, routing scope, and network configuration.
private subnetused by · A private subnet is a subnet whose resources lack direct connectivity or reachability to the public internet.

This explainer was generated by Manning's knowledge graph from the text of Amazon Web Services in Action, Third Edition: An in-depth guide to AWS. The section links point to the parts of the book it draws on.