EC2 VPC without NAT?How can I whitelist oubound-from-private-subnet traffic to S3 on the NAT instance of an EC2 VPC?Advice regarding resilient internet access from within an Amazon VPCHow to configure network on EC2 instance launched by Vagrant?How to SSH to ec2 instance in VPC private subnet via NAT serverAmazon EC2 VPC: NAT instance download speed performance dropAWS VPC Private vs Public subnetsAmazon EC2 VPC with two external IPs? maybe using NAT?AWS VPC routing table with both Internet Gateway and NAT GatewayCannot SSH to EC2 instances via public IP, whilst configured to use VPC NAT GatewayNo internet access to EC2 instance in VPCaws private instance cannot resolve hostname (VPC with NAT instance)
Accidentally leaked the solution to an assignment, what to do now? (I'm the prof)
Can I ask the recruiters in my resume to put the reason why I am rejected?
Client team has low performances and low technical skills: we always fix their work and now they stop collaborate with us. How to solve?
Revoked SSL certificate
Horror movie about a virus at the prom; beginning and end are stylized as a cartoon
How do I deal with an unproductive colleague in a small company?
Can an x86 CPU running in real mode be considered to be basically an 8086 CPU?
meaning of に in 本当に?
How can bays and straits be determined in a procedurally generated map?
How much of data wrangling is a data scientist's job?
Why are electrically insulating heatsinks so rare? Is it just cost?
Codimension of non-flat locus
Replacing matching entries in one column of a file by another column from a different file
Is it possible to run Internet Explorer on OS X El Capitan?
Can I make popcorn with any corn?
Is it possible for a square root function,f(x), to map to a finite number of integers for all x in domain of f?
LaTeX: Why are digits allowed in environments, but forbidden in commands?
How does quantile regression compare to logistic regression with the variable split at the quantile?
Why is Minecraft giving an OpenGL error?
Is it unprofessional to ask if a job posting on GlassDoor is real?
Arrow those variables!
What would happen to a modern skyscraper if it rains micro blackholes?
How old can references or sources in a thesis be?
Why is consensus so controversial in Britain?
EC2 VPC without NAT?
How can I whitelist oubound-from-private-subnet traffic to S3 on the NAT instance of an EC2 VPC?Advice regarding resilient internet access from within an Amazon VPCHow to configure network on EC2 instance launched by Vagrant?How to SSH to ec2 instance in VPC private subnet via NAT serverAmazon EC2 VPC: NAT instance download speed performance dropAWS VPC Private vs Public subnetsAmazon EC2 VPC with two external IPs? maybe using NAT?AWS VPC routing table with both Internet Gateway and NAT GatewayCannot SSH to EC2 instances via public IP, whilst configured to use VPC NAT GatewayNo internet access to EC2 instance in VPCaws private instance cannot resolve hostname (VPC with NAT instance)
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;
Is it possible to have an EC2 VPC with a public subnet and a private subnet, but without having to have a NAT box? The servers on the private network would not need to talk to the outside world, just to a load balancer on the public network (which also has a private address).
amazon-ec2 nat amazon-vpc
asked Aug 20 '13 at 5:16
Dan EllisDan Ellis
1307
add a comment |
Is it possible to have an EC2 VPC with a public subnet and a private subnet, but without having to have a NAT box? The servers on the private network would not need to talk to the outside world, just to a load balancer on the public network (which also has a private address).
amazon-ec2 nat amazon-vpc
asked Aug 20 '13 at 5:16
Dan EllisDan Ellis
1307
add a comment |
Is it possible to have an EC2 VPC with a public subnet and a private subnet, but without having to have a NAT box? The servers on the private network would not need to talk to the outside world, just to a load balancer on the public network (which also has a private address).
amazon-ec2 nat amazon-vpc
asked Aug 20 '13 at 5:16
Dan EllisDan Ellis
1307
Is it possible to have an EC2 VPC with a public subnet and a private subnet, but without having to have a NAT box? The servers on the private network would not need to talk to the outside world, just to a load balancer on the public network (which also has a private address).
amazon-ec2 nat amazon-vpc
amazon-ec2 nat amazon-vpc
asked Aug 20 '13 at 5:16
Dan EllisDan Ellis
1307
asked Aug 20 '13 at 5:16
Dan EllisDan Ellis
1307
asked Aug 20 '13 at 5:16
Dan EllisDan Ellis
1307
asked Aug 20 '13 at 5:16
Dan EllisDan Ellis
1307
asked Aug 20 '13 at 5:16
Dan EllisDan Ellis
1307
1307
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
Yes, if the servers in your private subnet really never need to talk to the outside world (they don't download software updates? Don't use public NTP servers?), then you don't need a NAT gateway for them. And the servers in your public subnet don't need a NAT box, they will route through an EC2 Internet gateway.
answered Aug 20 '13 at 5:22
Mike ScottMike Scott
7,1082425
How, then, do I delete the NAT instance? Or if I can't delete it, is terminating it sufficient to not get charged for it?
– Dan Ellis
Aug 20 '13 at 5:35
Remove it from your routing tables and then terminate it.
– Mike Scott
Aug 20 '13 at 12:11
add a comment |
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f532210%2fec2-vpc-without-nat%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
Yes, if the servers in your private subnet really never need to talk to the outside world (they don't download software updates? Don't use public NTP servers?), then you don't need a NAT gateway for them. And the servers in your public subnet don't need a NAT box, they will route through an EC2 Internet gateway.
answered Aug 20 '13 at 5:22
Mike ScottMike Scott
7,1082425
How, then, do I delete the NAT instance? Or if I can't delete it, is terminating it sufficient to not get charged for it?
– Dan Ellis
Aug 20 '13 at 5:35
Remove it from your routing tables and then terminate it.
– Mike Scott
Aug 20 '13 at 12:11
add a comment |
Yes, if the servers in your private subnet really never need to talk to the outside world (they don't download software updates? Don't use public NTP servers?), then you don't need a NAT gateway for them. And the servers in your public subnet don't need a NAT box, they will route through an EC2 Internet gateway.
answered Aug 20 '13 at 5:22
Mike ScottMike Scott
7,1082425
How, then, do I delete the NAT instance? Or if I can't delete it, is terminating it sufficient to not get charged for it?
– Dan Ellis
Aug 20 '13 at 5:35
Remove it from your routing tables and then terminate it.
– Mike Scott
Aug 20 '13 at 12:11
add a comment |
Yes, if the servers in your private subnet really never need to talk to the outside world (they don't download software updates? Don't use public NTP servers?), then you don't need a NAT gateway for them. And the servers in your public subnet don't need a NAT box, they will route through an EC2 Internet gateway.
answered Aug 20 '13 at 5:22
Mike ScottMike Scott
7,1082425
Yes, if the servers in your private subnet really never need to talk to the outside world (they don't download software updates? Don't use public NTP servers?), then you don't need a NAT gateway for them. And the servers in your public subnet don't need a NAT box, they will route through an EC2 Internet gateway.
answered Aug 20 '13 at 5:22
Mike ScottMike Scott
7,1082425
answered Aug 20 '13 at 5:22
Mike ScottMike Scott
7,1082425
answered Aug 20 '13 at 5:22
Mike ScottMike Scott
7,1082425
answered Aug 20 '13 at 5:22
Mike ScottMike Scott
7,1082425
7,1082425
How, then, do I delete the NAT instance? Or if I can't delete it, is terminating it sufficient to not get charged for it?
– Dan Ellis
Aug 20 '13 at 5:35
Remove it from your routing tables and then terminate it.
– Mike Scott
Aug 20 '13 at 12:11
add a comment |
How, then, do I delete the NAT instance? Or if I can't delete it, is terminating it sufficient to not get charged for it?
– Dan Ellis
Aug 20 '13 at 5:35
Remove it from your routing tables and then terminate it.
– Mike Scott
Aug 20 '13 at 12:11
How, then, do I delete the NAT instance? Or if I can't delete it, is terminating it sufficient to not get charged for it?
– Dan Ellis
Aug 20 '13 at 5:35
How, then, do I delete the NAT instance? Or if I can't delete it, is terminating it sufficient to not get charged for it?
– Dan Ellis
Aug 20 '13 at 5:35
Remove it from your routing tables and then terminate it.
– Mike Scott
Aug 20 '13 at 12:11
Remove it from your routing tables and then terminate it.
– Mike Scott
Aug 20 '13 at 12:11
add a comment |
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f532210%2fec2-vpc-without-nat%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
