You want to configure a NAT to perform address translation between your on-premises network blocks and GCP. Which NAT solution should you use?

Question

Options

• ACloud NAT
• BAn instance with IP forwarding enabled
• CAn instance configured with iptables DNAT rules
• DAn instance configured with iptables SNAT rules

• A
  3% (1)
• B
  11% (4)
• C
  78% (28)
• D
  8% (3)

Explanation

Cloud NAT (A) is a managed GCP service that provides source NAT for outbound internet traffic from GCP instances - it does not support custom address translation between arbitrary on-premises and GCP network blocks. For translating destination addresses of traffic arriving from on-premises into GCP (DNAT - Destination NAT), a VM instance configured with iptables DNAT rules is the correct solution, as it gives full control over custom IP translation rules between specific network ranges. Option B (IP forwarding) only allows a VM to route packets between networks without modifying addresses - no translation occurs. Option D (SNAT rules) translates source addresses for outbound traffic, which is the opposite of what is needed when on-premises hosts are initiating connections to GCP resources and their destination addresses need rewriting.

No community discussion yet for this question.