Accessing Public Networks from a Container
You can use NAT Gateway to enable containers in a VPC to access the public network. NAT Gateway provides source network address translation (SNAT), which translates private IP addresses to an EIP, providing secure and efficient access to the public network. Figure 1 shows the SNAT architecture. SNAT makes it unnecessary to bind an EIP to each pod in a VPC. SNAT supports a large number of concurrent connections, so it is a good fit for applications involving a large number of requests and connections.
To enable pods to access the public network, take the following steps:
- Buy an EIP.
- Log in to the management console.
- Click
in the upper left corner to select the desired region and project.
- Choose Service List > Networking > Virtual Private Cloud.
- In the navigation pane, choose Elastic IP and Bandwidth > EIPs.
- On the EIPs page, click Buy EIP.
- Configure the parameters.
Set Region to the region where pods are located.
Figure 2 Buying an EIP - Buy a NAT gateway. For details, see Buy a Public NAT Gateway.
- Log in to the management console.
- Click
in the upper left corner to select the desired region and project.
- Choose Service List > Networking > NAT Gateway.
- On the displayed page, click Buy NAT Gateway.
- Configure the parameters.
Figure 3 Buying a NAT gateway
- Configure an SNAT rule and bind the EIP to the subnet. For details, see Adding an SNAT Rule.
- Log in to the management console.
- Click
in the upper left corner to select the desired region and project.
- Choose Service List > Networking > NAT Gateway.
- On the displayed page, click the name of the NAT gateway for which you want to add the SNAT rule.
- On the SNAT Rules tab, click Add SNAT Rule.
- Configure the parameters.
Figure 4 Adding an SNAT ruleAfter the SNAT rule is configured, containers can access the public network.
Figure 5 Accessing the public network from a container
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.
For any further questions, feel free to contact us through the chatbot.
Chatbot