This is the Trace Id: b92330931fa0a52c32e67fb9fbe99199
Skip to main content Explore View all products (200+) Microsoft Foundry Azure Copilot GitHub Copilot Azure Kubernetes Service (AKS) Azure Cosmos DB Azure Database for PostgreSQL Azure Arc Microsoft Fabric Linux virtual machines in Azure Foundry Models Foundry Agent Service Foundry IQ Foundry Tools Foundry Control Plane Observability in Foundry Control Plane Azure OpenAI in Foundry Models Azure Speech in Foundry Tools Azure Machine Learning View all databases Azure Cosmos DB Azure DocumentDB Azure SQL Azure Database for PostgreSQL Azure Managed Redis Microsoft Fabric Azure Databricks Linux virtual machines in Azure Windows Server on Azure Azure Functions Azure Virtual Machine Scale Sets Azure API Management Azure Container Apps Azure Kubernetes Service (AKS) Azure Kubernetes Fleet Manager Azure Container Registry Azure Red Hat OpenShift Azure Container Instances Azure Container Storage Azure Arc Azure Local Microsoft Defender for Cloud Azure Monitor Microsoft Sentinel Azure Migrate View all solutions (40+) Cloud solutions for small and medium businesses Cloud migration and modernization center Data analytics for AI Azure Databases AI apps and agents Microsoft Marketplace Microsoft Sovereign Cloud AI apps and agents Responsible AI with Azure AI Infrastructure Data analytics for AI Machine learning operations (MLOps) Low-code application development on Azure Integration Services Serverless computing DevOps Migration and modernization center .NET apps migration Databases on Azure Linux on Azure Oracle on Azure SAP on the Microsoft Cloud Adaptive cloud High-performance computing (HPC) Infrastructure as a service (IaaS) Resiliency Azure Essentials Frontier Accelerate for Azure FinOps on Azure Microsoft Marketplace Azure pricing overview Create an Azure account Free Azure services Flexible purchase options Pricing calculator FinOps on Azure Maximize ROI from AI Azure savings plans Azure reservations Azure Hybrid Benefit Virtual Machines Azure SQL Microsoft Foundry Microsoft Fabric Azure Kubernetes Service (AKS) Microsoft Defender for Cloud View more Software Development Companies Microsoft Marketplace Find a partner Resources for Azure partners Get started with Azure Customer stories Analyst reports, white papers, and e-books Videos Learn more about cloud computing Documentation Explore Azure portal Developer resources Quickstart templates Resources for startups Developer community Students Azure for partners Blog Events and Webinars Learn Support Contact Sales Get started with Azure Sign in

Azure NAT Gateway

Provide highly reliable, secure, and scalable outbound connectivity to the internet.
Overview

Simplify outbound internet connectivity for virtual networks

NAT Gateway is a fully managed service that securely routes internet traffic from a private virtual network with enterprise-grade performance and low latency. With built-in high availability using software-defined networking, you can easily configure, scale, and deploy outbound connectivity for dynamic workloads with NAT Gateway.
  • Start securely connecting outbound to the internet with enterprise-grade performance and low latency by deploying a NAT (network address translation) gateway resource. With just a few clicks of a button, assign your NAT gateway to subnets within a single virtual network and static public IP addresses. NAT Gateway assumes the default route to the internet once configured to a subnet, with no traffic routing configurations required.
  • Scale out internet connectivity for your virtual networks and avoid common connection issues such as SNAT (source network address translation) port exhaustion. Assign multiple public IP addresses or prefixes to a NAT gateway resource to automatically scale outbound connectivity. All SNAT ports provided by NAT gateway public IPs are available on-demand to subnets attached to NAT gateway.
  • When you associate a NAT gateway resource to subnets in a virtual network, compute resources don't need public IP addresses to connect to the internet and can remain private. Internet-originated traffic cannot pass inbound through a NAT gateway; only outbound and response traffic is allowed.
  • NAT Gateway is a software-defined networking service fully managed by Azure. It has built-in redundancy to ensure high availability and resiliency to service outages. NAT Gateway does not count toward the network bandwidth of your private network compute resources and will not impact their performance.
Features

Reliable, scalable outbound connectivity for Azure virtual networks

Easy configuration and deployment

Easily configure and deploy outbound connectivity with just a few clicks of a button.

Automatic scaling

Automatically scale outbound connectivity for dynamic and large-scale workloads.

Private and secure network control

Control your outbound network traffic and keep your virtual network resources private and secure.

High availability and performance

Get high availability and robust performance that doesn't impact the network bandwidth of your compute resources.
Security

Embedded security and compliance

34,000
Full-time equivalent engineers dedicated to security initiatives at Microsoft.
15,000
Partners with specialized security expertise.
 
>100
Compliance certifications, including over 50 specific to global regions and countries.
A woman giving presentation in a conference room with other employees.
Pricing

Deliver high-performance, scalable internet connectivity from your virtual network

NAT Gateway pricing

Frequently asked questions

  • Azure Network Address Translation (NAT) Gateway is a fully managed and highly resilient NAT service that provides outbound connectivity to the internet through the deployment of a NAT gateway resource.
  • NAT Gateway is available in all Azure public clouds, Azure Government, and the Azure China region.
  • Assign your NAT gateway resource to one or more subnets in a virtual network and add at least one public IP address or prefix.
  • You can use up to 16 public IP addresses in any combination of prefixes and addresses with a single NAT gateway resource.
  • No, a NAT gateway resource cannot span multiple virtual networks.
  • With its on-demand allocation of SNAT ports for connecting outbound, NAT Gateway significantly reduces the risk of SNAT port exhaustion.
  • Read about the SLA for this Azure service.
A woman working on laptop.
Next steps

Choose the Azure account that’s right for you

Pay as you go or try Azure free for up to 30 days.
A person in a green shirt smiling.
Azure Solutions

Azure cloud solutions

Solve your business problems with proven combinations of Azure cloud services, as well as sample architectures and documentation.
A person wearing a white shirt and using a laptop.
Business Solutions Hub

Find the right Microsoft Cloud solution

Browse the Microsoft Business Solutions Hub to find the products and solutions that can help your organization reach its goals.