GCP PlayCloud Labs
-
GCP PlayCloud Labs
-
Guided Lab: How to Launch a GCP Compute Engine Linux Instance
-
Guided Lab: Creating a VM Using Instance Templates
-
Guided Lab: Creating and Managing Instance Groups in Compute Engine
-
Guided Lab: Creating a Spot VM Instance
-
Guided Lab: Configuring Shielded VM Options
-
Guided Lab: Exploring Instance Metadata in Google Cloud
-
Guided Lab: Vertically Scaling a VM Instance
-
Guided Lab: Setting up a Web Server on a VM Instance
-
Guided Lab: Using Startup Scripts in GCP VM Instances
-
Guided Lab: Creating a Custom Image from a VM Instance with Web Server in Google Cloud
-
Guided Lab: Setting Up and Managing a Database on a VM Instance
-
Guided Lab: Installing WordPress on an Ubuntu VM Instance with LEMP Stack
-
Guided Lab: Reserving or Promoting a Static IP Address for a VM Instance
-
Guided Lab: SSH Access to GCP VM Instance from Local Machine using SSH Key Pair
-
Guided Lab: Guarding Your VM with Deletion Protection
-
Guided Lab: Creating a Cloud Storage Bucket
-
Guided Lab: Hosting a Static Website in Google Cloud Storage Bucket
-
Guided Lab: Protecting Data on Cloud Storage Bucket Against Accidental Delete and Overwrite Using Object Versioning
-
Guided Lab: Using Cloud Storage Lifecycle Rules to Automate Object Management
-
Guided Lab: Managing Cloud Storage Buckets via SSH Commands
-
Guided Lab: Creating a Cloud SQL Instance
-
Guided Lab: Running SQL Commands in Cloud SQL Studio
-
Guided Lab: Creating and Restoring Cloud SQL Backups
-
Guided Lab: Integrating Cloud SQL Database instance with a VM instance
-
Guided Lab: Connecting Cloud SQL Database with MySQL Workbench (Local)
-
Guided Lab: Guarding Your Cloud SQL Instances with Deletion Protection
-
Guided Lab: Creating a Cloud NAT Gateway
-
Guided Lab: Creating a Google Kubernetes Engine (GKE) Cluster
-
Guided Lab: Connecting to a Kubernetes Engine Cluster
-
Guided Lab: Deploying a Simple Web Application on GKE
-
Guided Lab: Creating a Custom Virtual Private Cloud (VPC)
-
Guided Lab: Establishing VPC Peering for Secure Cross‑Network Communication
-
Guided Lab: Configuring Firewall Rules to Secure and Access a VM
-
Guided Lab: Deploying a LAMP Stack on a Compute Engine VM
Guided Lab: Creating a Cloud NAT Gateway
Description
Cloud NAT (Network Address Translation) is a managed Google Cloud service that allows virtual machine (VM) instances without external IP addresses to securely access the internet. It enables outbound connections for updates, patching, and external API access while preventing inbound connections from the internet, helping improve security and reduce exposure.
Cloud NAT works with Cloud Router to dynamically manage network address translation for resources in a Virtual Private Cloud (VPC) network. It scales automatically based on traffic and does not require manual configuration of NAT rules on individual instances, making it suitable for both small and large workloads.
In this guided lab, you’ll learn how to configure a Cloud Router, create a Cloud NAT gateway, and enable internet access for private Compute Engine instances while keeping them isolated from direct inbound traffic.
Objectives
In this lab, you will:
- Create a Cloud Router to support Cloud NAT
- Configure a Cloud NAT gateway for a VPC network
- Review and verify the Cloud NAT configuration details
Lab Steps
Navigating to Google Cloud NAT
1. In the Google Cloud console, go to the unified search bar at the top.
2. Type “Cloud nat” and select “Cloud NAT” from the results.

3. The Cloud NAT page will show up. Click “Get started” in the middle of the page to start configuring your own NAT gateway

Creating a NAT gateway
On the setup page, configure the following:
- Gateway name: <your preferred NAT gateway name>
- NAT type: Public

- Select Cloud Router
- Network: default
- Region: us-central1 (Iowa)
- Cloud Router: Select “create new router”. A right-hand sidebar will appear. Configure your cloud router there by providing your preferred router name and description

- Network Service Tier: Standard
- Once done, click Create

Verifying the Cloud NAT gateway configuration
Wait until the Cloud NAT gateway is created. You can see it in the Cloud NAT service page or in the notifications at the upper right corner to see if it was created successfully.


Congratulations! You’ve successfully created a Cloud Router and a Cloud NAT gateway, and explored its configuration in the Google Cloud Console. This simple guided lab gives you hands-on experience with setting up a NAT gateway and understanding its role in enabling outbound internet access for private resources. In future guided labs, we’ll go further by exploring additional NAT configurations and testing how it works with virtual machines to reinforce your understanding of its functionality and connectivity.