IBM Cloud VPC: Routing Private Subnet Traffic Through a NAT Gateway
Give private-subnet VSIs outbound internet access without assigning floating IPs to every instance. Compare NAT gateways with public gateways and verify the route.
ReadMeFeed / Community knowledge
Real questions. Useful conversations. Find the people who know your stack.
Give private-subnet VSIs outbound internet access without assigning floating IPs to every instance. Compare NAT gateways with public gateways and verify the route.
Stop guessing who changed your cloud configuration. Learn how to use IBM Cloud Activity Tracker to audit privileged operations and verify administrative changes via CLI and Log Analysis.
Security Groups and Network ACLs in IBM Cloud VPC provide layered defense: SGs are stateful instance allow‑lists; ACLs are stateless subnet guardrails with deny rules. See a three‑tier example, CLI steps, Flow Log verification, and trade‑offs.
ICOS lifecycle rules apply independently to current and noncurrent versions in versioned buckets. Scope rules by prefix to avoid unexpected retrieval charges.
Learn how to use IBM Cloud Object Storage lifecycle policies to automatically move aging data to the Infrequent Access tier, reducing costs while managing retrieval latency.
Learn how to implement a hub-and-spoke network topology using IBM Cloud Transit Gateway to reduce peering complexity, centralize egress, and manage multi-VPC routing.
Step‑by‑step guide to diagnose and fix TCP connectivity failures between IBM Cloud VSIs caused by missing or misconfigured Security Group rules.
Learn how to enable IBM Cloud Object Storage Object Lock, apply retention or legal holds, verify immutability, and understand the trade‑offs of WORM storage for compliance workloads.
Decide whether IBM Cloud Kubernetes Service’s cluster autoscaler or manual node‑pool scaling best fits your workload. Compare cost, performance, and ops overhead, then see a concrete Terraform/CLI example and how to validate the choice.