Adding a DNAT Rule

Scenarios

After a public NAT gateway is created, add DNAT rules to allow servers in your VPC to provide services accessible from the Internet.

Constraints

• Only one DNAT rule can be configured for each port on a server. One port can be mapped to only one EIP.
• If multiple servers need to provide services accessible from the Internet, add multiple DNAT rules.
• A maximum of 200 DNAT rules can be added on a public NAT gateway.

Procedure

1. Go to the public NAT gateway list page.
2. On the displayed page, click the name of the public NAT gateway on which you need to add a DNAT rule.
3. On the public NAT gateway details page, click the DNAT Rules tab.
4. Click Add DNAT Rule.
5. Configure required parameters. For details, see Table 1.

   Table 1 Descriptions of DNAT rule parameters

   Parameter	Description
   Scenario	Select VPC if your servers in a VPC will use the DNAT rule to share the same EIP to provide services accessible from the Internet. Direct Connect/Cloud Connect: Select this scenario if your on-premises servers or servers in another VPC will use the DNAT rule to provide services accessible from the Internet.
   Port Type	The port type. All ports: The public NAT gateway directs all requests received by the EIP to the private IP address of the destination cloud server. Specific port: The public NAT gateway forwards requests intended for the EIP over specified ports and protocol to specified ports of the destination cloud server.
   Protocol	The protocol can be TCP or UDP. This parameter is available if you select Specific port for Port Type. If you select All ports, the value of this parameter is All by default.
   Public IP Address Type	The type of the public IP address used for accessing the Internet. EIP: You can select an EIP that has not been bound to any resource or has been bound to a DNAT rule in the current VPC.
   Public Port	The port of the EIP used by the NAT gateway for external communications. This parameter is only available if you select Specific port for Port Type. Range: 1 to 65535 You can enter a specific port number or a port range, for example, 80 or 80-100.
   Instance Type	The type of the instance that will be providing services accessible from the Internet. Possible values are: Server Virtual IP address Custom
   NIC	The NIC of the server. This parameter is available if you set Instance Type to Server.
   Private IP Address	In a VPC scenario, this parameter can only be set to the private IP address of a server in the NAT gateway's VPC. The server will provide services accessible from the Internet through DNAT. In a Direct Connect/Cloud Connect scenario, set this parameter to the IP address of the server in your on-premises data center or your private IP address. This IP address is used by on-premises servers that are connected to a VPC through Direct Connect or servers in another VPC to provide services accessible from the Internet through DNAT. Configure the port of Private IP Address if you select Specific port for Port Type.
   Private Port	The port of the server over which the originating requests will be forwarded. This parameter is only available if you select Specific port for Port Type. Range: 1 to 65535 You can enter a specific port number or a port range, for example, 80 or 80-100.
   Description	Provides supplementary information about the DNAT rule. Enter up to 255 characters. Angle brackets (<>) are not allowed.

6. Click OK.

   Once the rule is created, its status changes to Running.

After you add a DNAT rule, associated with the servers to allow inbound or outbound traffic. Otherwise, the DNAT rule will not work.