The need
Offices, branches and private cloud environments need outbound internet access. Partners and SaaS providers often require a known set of source IP addresses to whitelist.
Central NAT on the fabric
Instead of NAT on every branch router, traffic can exit through a managed NAT Gateway on the Peer1IX fabric. All sites share a small set of stable public addresses.
Benefits
- Predictable source IPs for allow-lists.
- Central logging for audit.
- Less equipment at each site.
Add inspection
Combine with Peer1ix FWaaS so outbound traffic is filtered and inspected before it reaches the internet.
Cloud workloads too
Private cloud subnets connected to the fabric can use the same egress, giving one consistent outbound identity across environments.
