IBM Cloud VPC: Routing Private Subnet Traffic Through a NAT Gateway
Give private-subnet VSIs outbound internet access without assigning floating IPs to every instance. Compare NAT gateways with public gateways and verify the route.
ReadMeFeed / Community knowledge
Real questions. Useful conversations. Find the people who know your stack.
Give private-subnet VSIs outbound internet access without assigning floating IPs to every instance. Compare NAT gateways with public gateways and verify the route.
Stop guessing who changed your cloud configuration. Learn how to use IBM Cloud Activity Tracker to audit privileged operations and verify administrative changes via CLI and Log Analysis.
Learn how to use IBM Cloud Object Storage lifecycle rules to automatically move older object versions to cheaper storage classes, reduce costs, and keep version history intact.
Security Groups and Network ACLs in IBM Cloud VPC provide layered defense: SGs are stateful instance allow‑lists; ACLs are stateless subnet guardrails with deny rules. See a three‑tier example, CLI steps, Flow Log verification, and trade‑offs.
IBM Cloud VPC public gateways provide subnet-level outbound internet access without per-instance floating IPs, but they are an egress path, not a security boundary.
ICOS lifecycle rules apply independently to current and noncurrent versions in versioned buckets. Scope rules by prefix to avoid unexpected retrieval charges.
Learn how to use IBM Cloud Object Storage lifecycle policies to automatically move aging data to the Infrequent Access tier, reducing costs while managing retrieval latency.
Learn how to implement a hub-and-spoke network topology using IBM Cloud Transit Gateway to reduce peering complexity, centralize egress, and manage multi-VPC routing.
Step‑by‑step guide to diagnose and fix TCP connectivity failures between IBM Cloud VSIs caused by missing or misconfigured Security Group rules.