- What's New
- Function Overview
- Service Overview
-
Getting Started
- Allowing a Private Network to Access the Internet Using SNAT
- Allowing Internet Users to Access a Service in a Private Network Using DNAT
- Allowing On-Premises Servers to Communicate with the Internet
- Using Private NAT Gateways to Enable Communications Between Cloud and On-premises Networks
- Using Multiple Public NAT Gateways Together in Performance-Demanding Scenarios
- Change History
-
User Guide
- Public NAT Gateways
- Private NAT Gateways
- Managing NAT Gateway Tags
- Monitoring
- Auditing
- Change History
- Best Practices
-
API Reference
- Before You Start
- API Overview
- Calling APIs
- V2 APIs of Public NAT Gateways
- API v2.0
- Private Nat API
- Permissions Policies and Supported Actions
- Common Parameters
- Change History
-
FAQs
-
Public NAT Gateways
- What Is the Relationship Between a VPC, Public NAT Gateway, EIP Bandwidth, and ECS?
- How Does a Public NAT Gateway Offer High Availability?
- Which Ports Cannot Be Accessed?
- What Are the Differences Between Using a Public NAT Gateway and Using an EIP for an ECS?
- What Should I Do If I Fail to Access the Internet Through a Public NAT Gateway?
- Can I Change the VPC for a Public NAT Gateway?
- Does Public NAT Gateway Support IPv6 Addresses?
- What Security Policies Can I Configure to Implement Access Control If I Use a Public NAT Gateway?
- What Can I Do If Connection Between My Servers and the Internet Fails After I Add SNAT and DNAT Rules?
-
Private NAT Gateways
- How Do I Troubleshoot a Network Failure After a Private NAT Gateway Is Configured?
- How Many Private NAT Gateways Can I Create in a VPC?
- Can I Increase the Numbers of SNAT and DNAT Rules Supported by a Private NAT Gateway?
- Can an SNAT and DNAT Rule of a Private NAT Gateway Share the Same Transit IP Address?
- Can Private NAT Gateways Translate On-premises IP Addresses Connected to the Cloud Through Direct Connect?
- What Are the Differences Between Private NAT Gateways and Public NAT Gateways?
- How Is Private NAT Gateway Billed?
- Can a Private NAT Gateway Be Used Across Accounts?
-
SNAT Rules
- Why Do I Need SNAT?
- What Are SNAT Connections?
- What Is the Bandwidth of a Public NAT Gateway Used by a Server to Access the Internet? How Do I Configure the Bandwidth?
- How Do I Resolve Packet Loss or Connection Failure Issues When Using a NAT Gateway?
- What Should I Do If My ECS Fails to Access a Server on the Public Network Through a Public NAT Gateway?
- What Are the Relationships and Differences Between the CIDR Blocks in a NAT Gateway and in an SNAT Rule?
- DNAT Rules
-
Public NAT Gateways
- SDK Reference
Show all
Step 3: Add a DNAT Rule
Scenarios
After a public NAT gateway is created, add DNAT rules to allow servers in your VPC to provide services accessible from the Internet.
You can configure a DNAT rule for each port on a server. If multiple servers need to provide services accessible from the Internet, create multiple DNAT rules.
Prerequisites
A public NAT gateway is available.
Procedure
- Log in to the management console.
- Click in the upper left corner and select the desired region and project.
- Click Service List in the upper left corner. Under Networking, select NAT Gateway.
The Public NAT Gateway page is displayed.
- On the displayed page, click the name of the public NAT gateway on which you need to add a DNAT rule.
- On the public NAT gateway details page, click the DNAT Rules tab.
- Click Add DNAT Rule.
- Configure required parameters. For details, see Table 1.
Table 1 Descriptions of DNAT rule parameters Parameter
Description
Scenario
Select VPC if your servers in a VPC need to share an EIP to provide services accessible from the Internet.
Port Type
The port type
- All ports: All requests received by the gateway through all ports over any protocol will be forwarded to the private IP address of your server.
- Specific port: Only requests received from a specified port over a specified protocol will be forwarded to the specified port on the server.
Protocol
The protocol can be TCP or UDP.
This parameter is available if you select Specific port for Port Type. If you select All ports, the value of this parameter is All by default.
EIP
The EIP of the public NAT gateway
You can select an EIP that either has not been bound, has been bound to a DNAT rule of the current public NAT gateway with Port Type set to Specific port, or has been bound to an SNAT rule of the current public NAT gateway.
Outside Port
The port of the EIP used by the NAT gateway for external communications
This parameter is only available if you select Specific port for Port Type.
Range: 1 to 65535
You can enter a specific port number or a port range, for example, 80 or 80-100.
Private IP Address
The IP address of the server in the NAT gateway's VPC and processes matching packets where requests will be forwarded to
Configure the port of Private IP Address if you select Specific port for Port Type.
Inside Port
The port of the server over which the originating requests will be forwarded
This parameter is only available if you select Specific port for Port Type.
Range: 1 to 65535
You can enter a specific port number or a port range, for example, 80 or 80-100.
Description
Supplementary information about the DNAT rule
Enter up to 255 characters.
- Click OK.
After you add a DNAT rule, add rules to the security group associated with the servers to allow inbound or outbound traffic. Otherwise, the DNAT rule does not take effect.
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.