| Essentials | Developer | Standard | Production | Advanced | |
|---|---|---|---|---|---|
| Use case | Testing & DIY | Testing & developing | NAT & VPN service with high availability | NAT & VPN service with higher traffic levels | NAT & VPN for mission-critical systems |
| Highly available | ❌ Single instance | ❌ Single instance | ✅ Active-passive cluster | ✅ Active-passive cluster | ✅ Active-passive cluster |
| Performance | 100 Mbps 10 000 connections |
100 Mbps 10 000 connections |
500 Mbps 100 000 connections |
1000 Mbps 100 000 connections |
1000 Mbps 250 000 connections |
| Pricing | €0 /mo No egress fees |
€15 /mo No egress fees |
€25 /mo No egress fees |
€100 /mo No egress fees |
€300 /mo No egress fees |
NAT Gateway
Give your Cloud Servers secure and seamless access to the internet with NAT Gateway.
Download software updates, connect to external services, and enjoy uninterrupted connectivity, all without exposing your servers to the public internet.
And the best part? No hidden fees!
At UpCloud, we’ve eliminated network transfer costs, so you can use our NAT Gateway without worrying about unexpected charges.
Alexey, Network Engineer
No signup required
Experience High-Performance Cloud in Action
Instant access to our live demo. No signup. No commitment.
- Interactive sandbox environment
- 5th Gen AMD EPYC demo nodes
- Real-world workload examples
- Runs instantly in your browser
NAT Gateway Pricing
Setup your NAT Gateway today
Setup in seconds. No hidden fees.
NAT Gateways are available globally from all UpCloud locations
Equinix
Equinix’s flagship data center belongs to the most networked data center campus in Sydney. With 9,220 cabinets when fully built, it’s the largest Equinix data center in Australia.
Certifications
- ISO 27001 Information security management
- SOC 1 Type II Internal controls related to financial reporting
- SOC 2 Type II Data security and privacy
- Payment Card Industry Data Security Standard (PCI DSS)
Energy source
Mixed energy source
Available products
- Cloud Servers
- Block Storages
- Private Cloud
- Managed Object Storage
APAC-1 - Managed Kubernetes
- Managed Databases
- Managed Load Balancer
- Simple Backup
- SDN Private Networks
- VPN & NAT Gateways
Available since
03/2021
Equinix
HE6 is a premium Equinix International Business Exchange™ (IBX) with a flexible design infrastructure. It is equipped with state-of-the-art technology to ensure that HE6 meets every standard for security, resilience, quality and environmental management.
Certifications
- ISO 9001 Quality management
- ISO 14001 Environmental management
- ISO 22301 Security and resilience
- ISO 27001 Information security management
- ISO 45001 Occupational Health and Safety Management Systems
- ISO 50001 Energy management
- SOC 1 Type II Internal controls related to financial reporting
- SOC 2 Type II Data security and privacy
- PCI-DSS Information security
Energy source
100% hydroelectric power
Available products
- Cloud Servers
- Block Storages
- Private Cloud
- Managed Object Storage
EUROPE-1, 2 & 3 - Managed Kubernetes
- Managed Databases
- Managed Load Balancer
- Simple Backup
- SDN Private Networks
- VPN & NAT Gateways
Available since
5/2011
Telia
Telia Helsinki Data Center is the largest open data center in the Nordics, and it provides secure services for both Finnish and international companies and organizations. In addition to Telia’s own connections, this carrier-neutral data center provides access to all major providers and local internet exchanges.
Certifications
- ISO 9001 Quality management
- ISO 14001 Environmental management
- ISO 22301 Security and resilience
- ISO 27001 Information security management
- ISO 50001 Energy management
- OHSAS 18001 Occupational health and safety
- LEED Leadership in energy and environmental design
- CEEDA – Certified energy efficient datacenter
- Katakri 2020 TL IV / TL III, F&T
- FSC, Facility secure clearance
Energy source
100% renewable energy, mainly hydropower
Available products
- Cloud Servers
- GPU Servers
- Block Storage
- File Storage
- Private Cloud
- Managed Object Storage
EUROPE-1, 2 & 3 - Managed Kubernetes
- Managed Databases
- Managed Load Balancer
- Simple Backup
- SDN Private Networks
- VPN & NAT Gateways
Available since
1/2018
Digital Realty
Digital Realty is one of the largest data center operators with multiple facilities in Frankfurt. DE-FRA1 lies at the connection points to multiple transit providers and DE-CIX.
Certifications
- ISO 9001 Quality management
- ISO 14001 Environmental management
- ISO 22301 Security and resilience
- ISO 27001 Information security management
- ISO 50001 Energy management
- SOC 2 Type II Data security and privacy
- PCI-DSS Information security
Energy source
100% renewable energy
Available products
- Cloud Servers
- Block Storages
- Private Cloud
- Managed Object Storage
EUROPE-1, 2 & 3 - Managed Kubernetes
- Managed Databases
- Managed Load Balancer
- Simple Backup
- SDN Private Networks
- VPN & NAT Gateways
Available since
7/2015
Digital Realty
The Netherlands boasts one of the most important connection points regarding European network infrastructure. NL-AMS1 is a top-quality, secure European data center with low-latency connectivity to key European markets.
Certifications
- ISO 22301 Security and resilience
- ISO 27001 Information security management
- SOC 1 Type II Internal controls related to financial reporting
- SOC 2 Type II Data security and privacy
- PCI-DSS Information security
Energy source
100% renewable energy
Available products
- Cloud Servers
- Block Storages
- Private Cloud
- Managed Object Storage
EUROPE-1, 2 & 3 - Managed Kubernetes
- Managed Databases
- Managed Load Balancer
- Simple Backup
- SDN Private Networks
- VPN & NAT Gateways
Available since
3/2017
Verne
The data center features a Carrier-neutral data center with 10+ diverse entry points for complete connectivity, total security and maximum power. Offering industry-leading resilience in central London, Verne’s clients benefit from two separate 33kV supplies via two independent grid substations.
Certifications
- ISO 9001 Quality management
- ISO 14001 Environmental management
- ISO 14644-8 Cleanrooms and associated controlled environments
- ISO 27001 Information security management
- PCI-DSS Information security
- OHSAS 18001 Occupational Health and Safety Management Systems
- PAS 99 Integrated Management Systems
Energy source
100% renewable energy
Available products
- Cloud Servers
- Block Storages
- Private Cloud
- Managed Object Storage
EUROPE-1, 2 & 3 - Managed Kubernetes
- Managed Databases
- Managed Load Balancer
- Simple Backup
- SDN Private Networks
- VPN & NAT Gateways
Available since
8/2012
Equinix
Warsaw is one of East-Central Europe’s key economic hubs, with connectivity in Poland linking western and eastern Europe. The IBX® WA3, opened in Q1 2020, offers state-of-the-art colocation, as well as a host of advanced interconnection services.
Certifications
- ISO 27001 Information security management
Energy source
100% renewable energy
Available products
- Cloud Servers
- Block Storages
- Private Cloud
- Managed Object Storage
EUROPE-1, 2 & 3 - Managed Kubernetes
- Managed Databases
- Managed Load Balancer
- Simple Backup
- SDN Private Networks
- VPN & NAT Gateways
Available since
11/2020
Equinix
Singapore plays a critical role as Asia’s digital capital with diverse connectivity to other markets within Asia-Pacific. The SG-SIN1 data center is situated in a central part of the city, serving as a strategic location for expansion.
Certifications
- SOC 1 Type II Internal controls related to financial reporting
- SOC 2 Type II Data security and privacy
- ISO 27001 Information security management
- ISO 22301 Security and resilience
- OSPAR Outsourced Service Provider’s Audit Report
- PCI DSS Payment Card Industry Data Security Standard
- SS 564 Green Data Center
- TVRA Threat Vulnerability Risk Assessment
Energy source
100% renewable energy
Available products
- Cloud Servers
- Block Storages
- Private Cloud
- Managed Object Storage
APAC-1 - Managed Kubernetes
- Managed Databases
- Managed Load Balancer
- Simple Backup
- SDN Private Networks
- VPN & NAT Gateways
Available since
2/2017
Digital Realty
Digital Reality’s modern network-neutral data center campus offers the best connectivity in Spain.
Certifications
- ISO 9001 Quality management
- ISO 14001 Environmental management
- ISO 22301 Security and resilience
- ISO 27001 Information security management
- ISO 50001 Energy management
- ISO 20000 IT Service Management
- ENS National Security Framework
- PCI-DSS Information security
- SOC 1 Type II Internal controls related to financial reporting
- SOC 2 Type II Data security and privacy
Energy source
100% renewable energy
Available products
- Cloud Servers
- Block Storages
- Private Cloud
- Managed Object Storage
EUROPE-1, 2 & 3 - Managed Kubernetes
- Managed Databases
- Managed Load Balancer
- Simple Backup
- SDN Private Networks
- VPN & NAT Gateways
Available since
10/2020
Equinix
SK2 is strategically located in Stockholm, a global center of engineering, technology and innovation, and hosts one of Europe’s most exciting start-up scenes.
Certifications
- ISO 9001 Quality management
- ISO 14001 Environmental management
- ISO 22301 Security and resilience
- ISO 27001 Information security management
- ISO 50001 Energy management
- SOC 1 Type II Internal controls related to financial reporting
- SOC 2 Type II Data security and privacy
- PCI-DSS Information security
- EU Code of Conduct
- Cyber Essentials
- Climate Neutral Data Center Pact
- HDS
Energy source
100% hydroelectric power
Available products
- Cloud Servers
- Block Storages
- Private Cloud
- Managed Object Storage
EUROPE-1, 2 & 3 - Managed Kubernetes
- Managed Databases
- Managed Load Balancer
- Simple Backup
- SDN Private Networks
- VPN & NAT Gateways
Available since
11/2023
CoreSite
CoreSite’s Chicago facility is located right next to the Chicago Board of Trade and thus serves customers from one of the largest financial districts in the world. CoreSite’s Chicago facility is SSAE 16 Type 2 compliant, meaning it can be used by customers in highly regulated industries.
Certifications
- ISO 27001 Information security management
- PCI-DSS Information security
- SOC 1 Type II Internal controls related to financial reporting
- SOC 2 Type II Data security and privacy
- HIPAA
- NIST 800-53
Energy source
Mixed energy resources
Available products
- Cloud Servers
- Block Storages
- Private Cloud
- Managed Object Storage
US-1 - Managed Kubernetes
- Managed Databases
- Managed Load Balancer
- Simple Backup
- SDN Private Networks
- VPN & NAT Gateways
Available since
7/2014
CoreSite
CoreSite’s New York area facility serves conveniently the whole New York metropolitan area and the East Coast of the United States.
Certifications
- ISO 27001 Information security management
- PCI-DSS Information security
- SOC 1 Type II Internal controls related to financial reporting
- SOC 2 Type II Data security and privacy
- HIPAA
- NIST 800-53 Security and Privacy Controls for Federal Information Systems and Organizations
Energy source
Mixed energy sources (60% coal+gas, 34% nuclear and 4% renewable)
Available products
- Cloud Servers
- Block Storages
- Private Cloud
- Managed Object Storage
US-1 - Managed Kubernetes
- Managed Databases
- Managed Load Balancer
- Simple Backup
- SDN Private Networks
- VPN & NAT Gateways
Available since
7/2020
CoreSite
In San Jose, we operate from CoreSite’s Santa Clara campus data center which features the latest in data center efficiency and redundancy designs.
Certifications
- ISO 27001 Information security management
- PCI-DSS Information security
- SOC 1 Type II Internal controls related to financial reporting
- SOC 2 Type II Data security and privacy
- HIPAA
- NIST 800-53
Energy source
Mixed energy sources
Available products
- Cloud Servers
- Block Storages
- Private Cloud
- Managed Object Storage
US-1 - Managed Kubernetes
- Managed Databases
- Managed Load Balancer
- Simple Backup
- SDN Private Networks
- VPN & NAT Gateways
Available since
8/2018
Real Customer Success Stories
Networking Tutorials
- Networking
- UpCloud services
How to connect UpCloud to AWS using VPN Gateway
The VPN Gateway allows you to connect to external networks securely through a VPN endpoint. It operates with our SDN Router, which can connect with one or […]
- Networking
- UpCloud services
How to set up site-to-site VPN connection
Note! VPN functionality is currently in beta testing with limited availability. Customers can request access to beta features by contacting our customer support. Beta features […]
- Networking
- UpCloud services
How to add Floating IP on AlmaLinux 9
When you attach a new floating IP, you can find it listed to one of the servers at your UpCloud Control Panel that the floating […]
- Integrations
- Networking
- Security
How to set up a private VPN Server using UpCloud and UTunnel
UTunnel is an easy-to-setup VPN as a Service (VPNaaS) provider, offering robust VPN and Zero Trust networking solutions targeted towards small and medium businesses. UTunnel […]
- Load balancing
- Networking
How to add SSL Certificates to Load Balancers
Besides creating and managing Load Balancers, you also have the option to set up certificate management by creating SSL certificate bundles. The certificate bundles can […]
- Load balancing
- Networking
How to get started with Managed Load Balancer
Sharing work between multiple members of a group is a true and tested method for improving efficiency. However, rarely is it this quick and easy […]
- Integrations
- Networking
- Security
How to set up secure access to UpCloud with Perimeter 81
Perimeter 81 makes securing the connection to cloud resources extremely easy with simple setup on Cloud Servers and an easy to use client.
- Integrations
- Networking
- Security
How to install DNSCrypt on Cloud Server
DNSCrypt enabled authenticating communications between DNS clients and DNS resolvers which is easy to install on your Cloud Server.
- Networking
- Security
How to install Shadowsocks-libev SOCKS5 proxy server
Shadowsocks-libev is a lighter and faster open-source port of the Shadowsocks SOCKS5 proxy ideal to protect privacy on the Internet.
- Networking
- UpCloud services
How to connect private networks using SDN Router
SDN Router enables you quickly and easily connect any number of SDN Private Networks to allow your cloud servers to communicate between networks.
No surprise network transfer fees
UpCloud’s zero-cost egress initiative provides no unexpected costs for your network transfer.
Real Customer Success Stories
Recent UpCloud Blogs
- Data & Databases
- Cloud Infrastructure
- Data Security
What Are Managed Databases, and When to Use Them
- Data Sovereignty
- Cloud Infrastructure
- Cost Optimization
Why Data Transfer Fees Are the Biggest Risk to Your Server Bills
- Announcements
- People
- Vision and culture
UpCloud Appoints Founder Joel Pihlajamaa as Chief Executive Officer
- Long reads
- Cloud Infrastructure
- Open Source
Bring AI Search to Your PostgreSQL Database with pgvector Extension
- Announcements
- Artificial Intelligence
- Cloud Infrastructure
UpCloud, Siili Solutions, and ConfidentialMind Partner to Deliver Sovereign AI for Europe
- DevOps & Automation
- Security & Compliance
Using Trivy to Secure Your UpCloud Workloads: A DevSecOps Guide for Modern Infrastructure
- Architecture & Engineering
- Cloud Infrastructure
- DevOps & Automation
When Do You Need a Kubernetes Operator? A Practical Guide
- Cloud Infrastructure
- Industry analyses
- Long reads
Modern Software Architecture Patterns (2026): What Actually Scales in Production
Real Customer Success Stories
Trusted by the Best
- Platform-as-a-Service
Ormi powers real-time blockchain data infrastructure with UpCloud
Building a purpose-built data layer for Web3 Blockchain indexing differs from typical cloud workloads. Instead of handling short bursts of activity, Ormi’s s…
- Software-as-a-Service
Vitec MV migrates from US hyperscaler to UpCloud
Learn how Vitec MV left a US hyperscaler for UpCloud to gain stronger data control, lower latency, and reliable EU cloud infrastructure.
Achieving European data sovereignty and scalable growth for TAGGRS
Explore how TAGGRS achieves European data sovereignty with UpCloud's Managed Kubernetes Service. Read more!
Simplifying Kubernetes with a strong European Cloud Foundation
Explore how Pionative addresses Kubernetes complexity for organisations in Europe, enhancing cloud efficiency and reliability.
Paving the future of digital health with Oiva Health
Discover how Oiva Health is transforming the digital health landscape with innovation, reliability, and enhanced security.
Shipit Boosts Performance and Halves Cloud Spend with UpCloud
Road to UpCloud Prior to migrating to UpCloud, Shipit faced two primary challenges that constrained efficiency, these being unpredictable monthly expenses an…
Pioneering Sovereign AI in Europe with Cloud2
Cloud2’s AI Control Room is an AI platform that lets businesses build and manage AI agents and agent teams securely within their own cloud or […]
Achieving Competitive Edge with European Cloud
With its strong commitment to ensuring data security, Hailey HR needed to find an ISO 27001 certified, European provider that could help the company fulfil G…
- Platform-as-a-Service
- Success stories
How Liberbyte is Democratizing Data Exchange with UpCloud
Liberbyte is on a mission to democratize data exchange – setting a new standard for sharing, exchanging, managing, and monetizing data on a global scale. [&h…
A European cloud partnership built for open source agility
Aiven helps businesses around the world manage open source data technologies like Apache Kafka, PostgreSQL, OpenSearch, and more – all as fully managed servi…
NAT Gateway FAQ
NAT Gateway enables Cloud Servers on SDN Private Networks to access the public internet without needing their own dedicated public IP addresses. It handles tasks like downloading software updates and connecting to external services, all without exposing your servers to inbound traffic from the public internet. It operates in conjunction with an SDN Router and is fully managed by UpCloud.
By routing outbound traffic through a single external IP address on the NAT Gateway, your private servers never need to be directly reachable from the internet. Only returning traffic that was initiated from within your private network is permitted, eliminating unsolicited inbound connections. This reduces your attack surface significantly and simplifies firewall management since you only need to manage rules for one IP rather than one per server. Read more in the NAT Gateway security documentation.
There are four plans. The Development plan is free and supports a single gateway node with up to 10,000 simultaneous connections, suited for testing. The Standard plan runs two nodes in a high-availability configuration with up to 20,000 connections. The Production plan offers up to 50,000 connections across two nodes, with VPN support included. The Advanced plan delivers up to 100,000 connections with VPN support and up to 10 VPN tunnels. Full plan details are on the NAT Gateway pricing page.
Yes. The Development plan is available at no cost as part of UpCloud Essentials, which gives you free access to foundational services including NAT Gateway, VPN Gateway, Load Balancer, and Managed Kubernetes. You can deploy up to 5 free NAT Gateway instances per account under the Essentials tier. To use it, simply select the Development plan when setting up your gateway in the UpCloud Control Panel.
NAT Gateway is billed hourly based on the plan selected. There are no network transfer costs, as UpCloud has eliminated egress fees across its platform. This means you can route outbound traffic through the NAT Gateway without worrying about unexpected bandwidth charges. See the full breakdown on the network billing page.
Yes, on the Standard, Production, and Advanced plans. Each of these deploys two gateway instances in an active/passive configuration. If the active instance fails, the standby takes over automatically to maintain continuous outbound connectivity for your servers. The Development plan runs a single instance and is not covered by a high-availability guarantee. More detail is available in the NAT Gateway high availability docs.
Yes. You can change your NAT Gateway plan at any time through the UpCloud Control Panel or via the UpCloud API. Scaling up increases your simultaneous connection limit and available bandwidth. Scaling down reduces these limits. The change takes effect immediately and billing adjusts to the new hourly rate from that point. See the scaling documentation for guidance.
On the Production and Advanced plans, NAT Gateway includes built-in VPN support, allowing it to also act as a VPN Gateway for site-to-site IPsec connections. This means a single gateway can handle both outbound NAT traffic and encrypted tunnels to external networks such as other cloud providers, corporate offices, or on-premise infrastructure, without needing a separate service.
NAT Gateway can be configured in seconds from the UpCloud Control Panel or programmatically via the UpCloud API. You attach the gateway to an SDN Router, connect it to your private network, and routing tables are automatically updated via DHCP so your servers gain outbound internet access without any manual configuration. Step-by-step setup examples are available in the NAT Gateway setup documentation.
NAT Gateway works with Cloud Servers on SDN Private Networks, as well as with private clusters on Managed Kubernetes. Any service that runs behind a private network and needs outbound internet access without a public IP is a suitable candidate. It is compatible with all UpCloud data centers globally.