Latest Content

How to List NAT Gateway Subscription Firewall Rules

Updated on 05 February, 2026

Learn how to list NAT Gateway firewall rules in Vultr via portal or API.

NAT Gateway firewall rules control which traffic is permitted or denied through the gateway based on IP protocol, port, and source subnet. Listing rules allows you to review active policies, verify security configurations, troubleshoot connectivity issues, and audit traffic controls for workloads using the NAT Gateway.

Follow this guide to list NAT Gateway subscription firewall rules using the Vultr Customer Portal or API.

  • Vultr Customer Portal
  • Vultr API

  1. Navigate to Products, expand the Network drop-down and select VPC Networks.

  2. Select your target VPC Network with NAT Gateway connectivity.

  3. Scroll to the NAT Firewall section.

    The section displays all configured firewall rules in a table with the following columns:

    • Action: The rule action (Accept).
    • Protocol: The network protocol (TCP or UDP).
    • Port / Range: The destination port or port range.
    • IP: The source subnet in CIDR notation with subnet size.

  1. Send a GET request to the List VPCs endpoint to retrieve available VPCs.

    console 
    $ curl "https://api.vultr.com/v2/vpcs" \
    -X GET \
    -H "Authorization: Bearer ${VULTR_API_KEY}"

    The output displays all VPCs in your account. Note the id field for the target VPC.

  2. Send a GET request to the List NAT Gateway subscriptions endpoint to retrieve the gateway ID. Replace VPC_ID with the ID from the previous step.

    console 
    $ curl "https://api.vultr.com/v2/vpcs/VPC_ID/nat-gateway" \
    -X GET \
    -H "Authorization: Bearer ${VULTR_API_KEY}"

    The output displays NAT Gateway subscriptions for the VPC. Note the id field for the target gateway.

  3. Send a GET request to the List NAT Gateway Firewall Rules endpoint to retrieve all firewall rules. Replace VPC_ID and NAT_GATEWAY_ID with your values.

    console 
    $ curl "https://api.vultr.com/v2/vpcs/VPC_ID/nat-gateway/NAT_GATEWAY_ID/global/firewall-rules" \
    -X GET \
    -H "Authorization: Bearer ${VULTR_API_KEY}"

    The output displays all firewall rules configured for the gateway in the firewall_rules array. Each rule object contains:

    • id: Unique identifier for the rule
    • action: Rule action (accept)
    • protocol: Network protocol (tcp or udp)
    • port: Target port number as a string
    • subnet: Source subnet in CIDR notation
    • subnet_size: Subnet mask size
    • notes: Rule description

    The response includes a meta object with the total count and pagination links.

Comments