{"id":254,"date":"2015-12-17T21:00:32","date_gmt":"2015-12-18T05:00:32","guid":{"rendered":"https:\/\/cloudinsidr.com\/content\/?p=254"},"modified":"2016-03-22T14:13:49","modified_gmt":"2016-03-22T22:13:49","slug":"nat-as-a-service-amazons-managed-vpc-nat-gateway-for-aws-and-why-you-should-probably-take-it-for-a-spin","status":"publish","type":"post","link":"https:\/\/www.cloudinsidr.com\/content\/nat-as-a-service-amazons-managed-vpc-nat-gateway-for-aws-and-why-you-should-probably-take-it-for-a-spin\/","title":{"rendered":"NAT as a Service: Amazon’s Managed VPC NAT Gateway for AWS and Why You Should Probably Take It for a Spin"},"content":{"rendered":"

Amazon’s shiny new managed VPC NAT Gateway on AWS<\/strong> (unveiled today) can be translated into plain English as\u00a0NAT (Network address Translation) as a service<\/em>. You might wonder who is going to need it if a VPC was just fine as of yesterday.<\/p>\n

\"Managed<\/a><\/p>\n

If you are currently using NAT to connect your EC2 instances that are isolated inside a VPC to the outside world, then the answer is: you are. Even if\u00a0your instances connect directly to the Internet, you might still be better off with the service\u00a0than without\u00a0it.<\/p>\n

<\/p>\n

When using EC2, it is good practice to enclose your compute resources within a VPS (Amazon’s Virtual Private Cloud) to shield your instances from external access as much as possible. For administrative purposes and in order to be able to transfer data in and out, you would then use a virtual private gateway to connect the VPC via a Virtual Private Network (VPN) connection to your existing on-premise infrastructure. In the past, connecting isolated EC2 from within the VPC to the Internet required a minimum of two additional EC2 hosts to facilitate NAT (network address translation) with a failover. How this might look on paper in a deployment scenario that requires HA (high availability) illustrates the image below (source: Amazon<\/a>).<\/p>\n

\"Dual,<\/a>
Dual, active NAT instances on AWS with the possibility of Route takeover on NAT failure<\/figcaption><\/figure>\n

\u201eInstead of configuring, running, monitoring, and scaling a cluster of EC2 instances (you\u2019d need at least 2 in order to ensure high availability), you can now create and configure a gateway with a couple of clicks\u201c writes Jeff Barr<\/a> ( @jeffbarr)\u00a0\u201eThe gateway has built-in redundancy for high availability. Each gateway that you create can handle up to 10 Gbps of bursty TCP, UDP, and ICMP traffic, and is managed by Amazon. You control the public IP address by assigning an Elastic IP Address when you create the gateway.\u201c<\/p><\/blockquote>\n

This is a major step on Amazons part, as it opens up the possibility of using the service for much more than just NAT. Intrusion detection and DDoS mitigation are only two of many possible directions Amazon could take this in.<\/p>\n

Currently, each managed gateway is assigned to one availability zone, which means that downtime is not entirely out of the question.<\/p>\n

While true HA is not yet possible with the managed service, it’s clearly a start.<\/p>\n

A breakdown of current prices is right here<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"

Amazon’s shiny new managed VPC NAT Gateway on AWS (unveiled today) can be translated into plain English as\u00a0NAT (Network address Translation) as a service. You might wonder who is going to need it if a VPC was just fine as of yesterday. If you are currently using NAT to connect your EC2 instances that are […]<\/p>\n","protected":false},"author":101011,"featured_media":76,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[17,33],"tags":[63,64,65,62],"yoast_head":"\nNAT as a Service: Amazon's Managed VPC NAT Gateway for AWS and Why You Should Probably Take It for a Spin - CloudInsidr<\/title>\n<meta name=\"robots\" content=\"index, follow\" \/>\n<meta name=\"googlebot\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta name=\"bingbot\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.cloudinsidr.com\/content\/nat-as-a-service-amazons-managed-vpc-nat-gateway-for-aws-and-why-you-should-probably-take-it-for-a-spin\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"NAT as a Service: Amazon's Managed VPC NAT Gateway for AWS and Why You Should Probably Take It for a Spin - CloudInsidr\" \/>\n<meta property=\"og:description\" content=\"Amazon’s shiny new managed VPC NAT Gateway on AWS (unveiled today) can be translated into plain English as\u00a0NAT (Network address Translation) as a service. You might wonder who is going to need it if a VPC was just fine as of yesterday. If you are currently using NAT to connect your EC2 instances that are […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.cloudinsidr.com\/content\/nat-as-a-service-amazons-managed-vpc-nat-gateway-for-aws-and-why-you-should-probably-take-it-for-a-spin\/\" \/>\n<meta property=\"og:site_name\" content=\"CloudInsidr\" \/>\n<meta property=\"article:published_time\" content=\"2015-12-18T05:00:32+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2016-03-22T22:13:49+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.cloudinsidr.com\/content\/wp-content\/uploads\/2015\/11\/cloudinsidr_logo_900px-wide.png\" \/>\n\t<meta property=\"og:image:width\" content=\"900\" \/>\n\t<meta property=\"og:image:height\" content=\"326\" \/>\n<meta name=\"twitter:card\" content=\"summary\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.cloudinsidr.com\/content\/#website\",\"url\":\"https:\/\/www.cloudinsidr.com\/content\/\",\"name\":\"CloudInsidr\",\"description\":\"Cyber security, infotech\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":\"https:\/\/www.cloudinsidr.com\/content\/?s={search_term_string}\",\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/www.cloudinsidr.com\/content\/nat-as-a-service-amazons-managed-vpc-nat-gateway-for-aws-and-why-you-should-probably-take-it-for-a-spin\/#primaryimage\",\"inLanguage\":\"en-US\",\"url\":\"https:\/\/www.cloudinsidr.com\/content\/wp-content\/uploads\/2015\/11\/cloudinsidr_logo_900px-wide.png\",\"width\":900,\"height\":326,\"caption\":\"cloudinsidr.com logo (900px wide)\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.cloudinsidr.com\/content\/nat-as-a-service-amazons-managed-vpc-nat-gateway-for-aws-and-why-you-should-probably-take-it-for-a-spin\/#webpage\",\"url\":\"https:\/\/www.cloudinsidr.com\/content\/nat-as-a-service-amazons-managed-vpc-nat-gateway-for-aws-and-why-you-should-probably-take-it-for-a-spin\/\",\"name\":\"NAT as a Service: Amazon's Managed VPC NAT Gateway for AWS and Why You Should Probably Take It for a Spin - CloudInsidr\",\"isPartOf\":{\"@id\":\"https:\/\/www.cloudinsidr.com\/content\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.cloudinsidr.com\/content\/nat-as-a-service-amazons-managed-vpc-nat-gateway-for-aws-and-why-you-should-probably-take-it-for-a-spin\/#primaryimage\"},\"datePublished\":\"2015-12-18T05:00:32+00:00\",\"dateModified\":\"2016-03-22T22:13:49+00:00\",\"author\":{\"@id\":\"https:\/\/www.cloudinsidr.com\/content\/#\/schema\/person\/21ce63bea726ea64da1beed97e63ba84\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.cloudinsidr.com\/content\/nat-as-a-service-amazons-managed-vpc-nat-gateway-for-aws-and-why-you-should-probably-take-it-for-a-spin\/\"]}]},{\"@type\":[\"Person\"],\"@id\":\"https:\/\/www.cloudinsidr.com\/content\/#\/schema\/person\/21ce63bea726ea64da1beed97e63ba84\",\"name\":\"Anna E Kobylinska\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/www.cloudinsidr.com\/content\/#personlogo\",\"inLanguage\":\"en-US\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/7a3e9bd152f9d5cd41bf2b92df649857?s=96&d=mm&r=g\",\"caption\":\"Anna E Kobylinska\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","_links":{"self":[{"href":"https:\/\/www.cloudinsidr.com\/content\/wp-json\/wp\/v2\/posts\/254"}],"collection":[{"href":"https:\/\/www.cloudinsidr.com\/content\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cloudinsidr.com\/content\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cloudinsidr.com\/content\/wp-json\/wp\/v2\/users\/101011"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cloudinsidr.com\/content\/wp-json\/wp\/v2\/comments?post=254"}],"version-history":[{"count":7,"href":"https:\/\/www.cloudinsidr.com\/content\/wp-json\/wp\/v2\/posts\/254\/revisions"}],"predecessor-version":[{"id":263,"href":"https:\/\/www.cloudinsidr.com\/content\/wp-json\/wp\/v2\/posts\/254\/revisions\/263"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.cloudinsidr.com\/content\/wp-json\/wp\/v2\/media\/76"}],"wp:attachment":[{"href":"https:\/\/www.cloudinsidr.com\/content\/wp-json\/wp\/v2\/media?parent=254"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cloudinsidr.com\/content\/wp-json\/wp\/v2\/categories?post=254"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cloudinsidr.com\/content\/wp-json\/wp\/v2\/tags?post=254"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}