por An AWS VPC or Amazon VPC is the virtual cloud of Amazon Web Service which has the ability to launch AWS system resources into a logically isolated virtual network. This tool includes services such as NAT Gatewaywhich is characterized by allowing the instances of a subnet connect to services outside the VPC.
At the same time, the NAT Gateway tool in the AWS VPC prevents external services from initiating a connection using subnet instances, so It will be very important that you know everything you need to know about this optionincluding its main properties and characteristics.
What is NAT Gateway in Amazon VPC?
A NAT Gateway, also known as Network Address Translation o Network Address Translation Service, refers to an Amazon VPC tool that is used to enable instances of a certain private subnet can establish a connection with services external to the virtual private cloudbut these same services do not initiate a connection with the instances.
It should be noted that, in addition, each of the NAT Gateways is created in a certain availability zone and is implemented with redundancy so that it can perform its tasks in a better way.
Features of NAT Gateway in AWS VPC
The NAT Gateway tool in AWS VPC has a series of properties and characteristics that allow it to function, including: can be created and managed using the Amazon VPC console.
In addition to this, NAT Gateway is characterized by allow both public and private connectivities. So it is responsible for replacing the source IP of the instances with the IP address of the NAT Gateway, which implies that, for those that are public, it will be the elastic IP address; while, for private ones, it will correspond to the private IP address of the NAT Gateway.
When it comes to creating this tool, the following must be taken into account: requirements for an optional name, subnet, or subnet and an optional type of connectivity (public or private).
Also It is possible to delete a NAT Gateway, through the Amazon VPC console. This deletion will mean that your entry will continue to be visible on the console for an estimated period of one hour, until it is automatically deleted.
Other features of the NAT Gateway tool in the Amazon VPC are:
Enable the outgoing internet connection.Does not allow incoming connection of external servers. It is very useful for operating systems or packages that have access to public web services. It is a tool completely managed and administered by the platform Amazon Web Service (AWS).It is characterized by its high availabilityso it has the ability to guarantee the continuity of its work, even in situations where problems arise in the system. It supports protocols such as Transmission Control Protocol (TCP), User Datagram Protocol (UDP) and the protocol Internet Control Message Protocol (ICMP).Up to 5Gbps bandwidth which can be automatically expanded up to 45Gbps.It is not possible to direct traffic to a NAT Gateway using VPC peering, connections site-to-site VPN, nor through the AWS tool Direct Connect.Each of these tools is created in an availability zone with redundancy. It should be noted that the system establishes a quota for the number of NAT Gateways that can be created in each zone.It is not possible to associate a NAT Gateway with a certain security group; but these groups can be associated with the instances in order to control their traffic. By default, IAM users do not have privileges that enable them to work with NAT Gateways.
What is the next step?
In this article you have been able to learn what the NAT Gateway option is in the Amazon VPC, as well as what its main characteristics, functions and properties are in the system. Now that you are here, do not hesitate to continue with your training process and Take the next step to become an expert. You can get it by signing up for our DevOps & Cloud Computing Full Stack Bootcamp!
With this bootcamp you will be able to learn all the necessary tools to stand out within the IT sector and become a true professional in this field. Dare to enroll to continue learning!