Latest Content

How to Provision a NAT Gateway Subscription

Updated on 05 February, 2026

Learn how to provision a Vultr NAT Gateway for secure, private internet access.

Vultr NAT Gateway provides centralized, secure internet egress for compute instances on a VPC that do not have public IP addresses. The service supports controlled inbound access via port forwarding, with all traffic governed by NAT Gateway firewall rules. Typical use cases include isolating workloads from the public internet while allowing package updates, conserving IPv4 addresses, and simplifying perimeter security by managing rules at the gateway.

Follow this guide to provision a NAT Gateway subscription using the Vultr Customer Portal or API.

  • Vultr Customer Portal
  • Vultr API

NAT Gateway provisions automatically when you create a VPC Network with Private Instances behind NAT Gateway connectivity. This approach creates both the VPC and NAT Gateway subscription simultaneously.

  1. Navigate to Products, expand the Network drop-down and select VPC Networks.

  2. Click Add VPC Network.

  3. Enter a new label in the VPC Network Name field to identify the network.

  4. In the VPC Connectivity section, select Private Instances behind NAT Gateway.

    Note
    This option automatically provisions a NAT Gateway subscription for the VPC.

  5. Select your target Vultr location to deploy the VPC Network and NAT Gateway.

  6. In the Network Settings section, enable Custom IP Range to enter a custom private IPv4 subnet, or keep it disabled to automatically assign an IP range.

  7. Review the Summary panel to verify the configuration and monthly cost.

  8. Click Create VPC Network.

  1. Create a VPC in your target region and note the VPC ID. Replace REGION_ID with your Vultr region identifier and LABEL with a descriptive name. See the VPC Provisioning guide for details and additional options.

    console 
    $ curl "https://api.vultr.com/v2/vpcs" \
    -X POST \
    -H "Authorization: Bearer ${VULTR_API_KEY}" \
    -H "Content-Type: application/json" \
    --data '{
        "region": "REGION_ID",
        "description": "LABEL"
    }'

    The output displays the VPC details. Note the id field value.

  2. Send a POST request to the Create NAT Gateway subscription endpoint for the VPC. Replace VPC_ID with the ID from the previous step.

    console 
    $ curl "https://api.vultr.com/v2/vpcs/VPC_ID/nat-gateway" \
    -X POST \
    -H "Authorization: Bearer ${VULTR_API_KEY}" \
    -H "Content-Type: application/json" \
    --data '{}'

    The output displays the NAT Gateway subscription details. The gateway initially shows a pending status while provisioning completes. The system automatically assigns public IPv4, IPv6, and private IP addresses.

Comments