AWS First Steps
LanguageEnglish
New feature

AWS Transit Gateway and AWS Cloud WAN now support 1:1 NAT

AWS Transit Gateway and AWS Cloud WAN now provide managed one-to-one NAT via Regional Private NAT Gateway, enabling customers to connect private networks with overlapping IP ranges without renumbering or deploying NAT appliances.

AWS Transit Gateway and AWS Cloud WAN integrate with regional private NAT gateways to provide 1:1 NAT, enabling connections for networks with overlapping classless inter-domain routing (CIDR) blocks. Customers define address translation rules on their AWS Transit Gateway or AWS Cloud WAN attachments, specifying which source CIDR from Amazon VPC, AWS Site-to-Site VPN, AWS Direct Connect, and Transit Gateway Connect via SD-WAN appliances maps to which private IP range. Both services automatically perform bidirectional translation, eliminating the need for separate return traffic rules or NAT appliance deployments. AWS operates, scales, and manages NAT functionality as part of the attachment. Customers can configure this in minutes using the AWS Management Console, AWS CLI, AWS SDK, or AWS CloudFormation, and monitor translated traffic with Amazon CloudWatch metrics and Amazon EventBridge events. AWS Transit Gateway and AWS Cloud WAN provide 1:1 NAT via regional private NAT gateways in all active AWS commercial regions. For detailed pricing, see the Amazon VPC pricing page.

Why it matters

This feature is useful for connecting private networks with overlapping IP address ranges on AWS, such as during corporate mergers and acquisitions, partner network connections, and interconnection of independently provisioned VPCs.

Read the original AWS announcement

Related articles and terms

The Real Reason NAT Gateway Is Expensive - How Data Processing Charges Work and How to Avoid ThemBreak down the mechanisms behind NAT Gateway's high hourly and data processing charges, and explore practical cost-reduction strategies including VPC endpoints, NAT instances, and IPv6 migration.Amazon VPC Network Design - Subnet Architecture and NAT Gateway OptimizationLearn how to design public/private subnet separation, layered security group management, and reduce NAT Gateway costs with Gateway VPC Endpoints.Amazon VPCA service for building a logically isolated virtual network within the AWS cloud, giving you full control over IP address ranges, routing, and securityAWS Transit GatewayA service that interconnects multiple VPCs and on-premises networks in a hub-and-spoke topology, dramatically simplifying network architectureBuilding a Hub-and-Spoke Network with AWS Transit Gateway - Designing Multi-VPC ConnectivityConsolidates multiple VPCs and on-premises networks in a hub-and-spoke topology and establishes security boundaries through route table isolation. It also introduces multi-region connectivity through peering.