AWS - How to access internet from private instances using NAT instance | Demo
AWS - How to access internet from private instances using NAT instance | Demo
Problem Statement:
How can we access the internet in the instances which are in the Private subnet to download or install any packages?
To Access the internet in the private subnet we have two Ways.
1)NAT instance
2)NAT Gateway
a)Public Nat Gateway
b)Private Nat Gateway
NAT Instance:
To configure NAT instance we have to follow the below 4 steps.
Step-1:- Launch a NAT instance: We can Launch it from the MarketPlace/Community AMI
Step-2:- Disable Source/Destination check: By default Source/Destination check will be in an enable state, we have to make it disable state.
Step-3:- Modify the Route Table:
Navigate to the "Route Tables" section of the VPC Console.
Select the private subnet where you want to provide internet access.
Edit the route table and add a new route with the destination CIDR block set to 0.0.0.0/0 and the target set to the instance ID of the NAT instance.
Step-4:- Modify the Security Group:
Navigate to the "Security Groups" section of the VPC Console.
Select the security group assigned to the NAT instance.
Add an inbound rule to allow traffic from the private subnet on port 80 and 443 for HTTP and HTTPS access.
#aws
#nat
#vpc
#internet
#Nat instance
#Network address translation
#Private Subnet
#Private Route Table
#Private Ec2 instance