This topic describes how to create a DNAT entry on an edge NAT Gateway instances. DNAT is used to map elastic IP addresses (EIPs) to the private IP addresses of Edge Node Service (ENS) instances in a virtual private cloud (VPC). After you configure DNAT, the ENS instances can provide Internet-facing services.
If your ENS instance is assigned a public IP address or associated with an EIP, we recommend that you do not create a DNAT entry for the ENS instance. Before you create a DNAT entry for the ENS instance, you must release the assigned public IP address or disassociate the EIP from the ENS instance.
Prerequisites
A NAT Gateway instance is created and associated with an EIP. For more information, see Create and manage edge NAT Gateway instances.
Create a DNAT entry
Log on to the ENS console.
In the left-side navigation pane, click NAT Gateway.
On the NAT Gateway page, find the NAT Gateway instance that you want to manage, and click Manage in the Actions column.
On the DNAT tab, click Create DNAT entry.
In the Configure DNAT page, configure the parameters. The following table describes the parameters.
Parameter
Description
Entry Name
The name of the DNAT entry.
Public IP Address
The public IP address that is used to access the Internet. You cannot use the same public IP address as the SNAT entry.
ENS Instance
Select the ENS instance that uses the DNAT entry to provide Internet-facing services. You can only select an ENS instance from the drop-down list.
Public Port
The external port or port range that is used in port forwarding.
Valid values: 1 to 65535.
To specify a port range, separate the first port and the last port with a forward slash (/), such as
10/20.
Private Port
The private port or port range that is used in port forwarding.
NoteThe number of ports in the port ranges that are specified for Public Port and Private Port must be the same.
Protocol
The protocol of the forwarding port. Valid values: TCP, UDP, and Any.
Click Create.
Delete an DNAT entry
If you no longer need to use an ENS instance to provide Internet-facing services, you can delete the DNAT entry that is created for the ENS instance.
Log on to the ENS console.
In the left-side navigation pane, click NAT Gateway.
On the NAT Gateway page, find the NAT Gateway instance that you want to manage, and click Manage in the Actions column.
On the DNAT tab, find the DNAT entry that you want to delete and click Delete in the Actions column.
In the message that appears, click OK.