Can I Use a NAT Gateway for Inbound Traffic?

By default, NAT Gateways provide outbound-only internet access for private instances. Inbound traffic is not allowed unless you configure optional Port Forwarding rules.

Port Forwarding creates a mapping that directs inbound traffic from a specific external port on the NAT Gateway to a designated internal destination on a private instance. When configuring Port Forwarding, you specify:

• External port: The port on the NAT Gateway that receives incoming traffic
• Internal destination: The private IP address and port of the target instance
• Protocol: The network protocol for the mapping, either TCP or UDP

This setup provides controlled inbound access for services such as SSH, HTTP, or custom applications while keeping the instance otherwise private.

For detailed instructions on configuring Port Forwarding, see the Port Forwarding Rules documentation.