Cloud NAT Gateway Cost Calculator
Estimate monthly cloud NAT cost from gateway time and routed traffic while comparing offload savings, route charges, and budget impact.{{ summaryTitle }} {{ summaryValue }} {{ summaryLine }} {{ badge.label }}{{ badge.value }}
| Cost component | Usage basis | Monthly cost | Planning note | Copy |
|---|---|---|---|---|
| {{ row.component }} | {{ row.basis }} | {{ row.cost }} | {{ row.note }} |
| Scenario | Modeled change | Monthly total | Impact | Next check | Copy |
|---|---|---|---|---|---|
| {{ row.scenario }} | {{ row.change }} | {{ row.total }} | {{ row.impact }} | {{ row.action }} |
Managed network address translation (NAT) gives private cloud workloads outbound connectivity without assigning each workload a public address. The network design is often simple to draw, but its bill is split across time, traffic, public IPv4 addresses, data transfer, and sometimes cross-zone or endpoint charges.
Traffic volume usually drives the largest cost changes. A gateway can incur a processing charge for every gigabyte that passes through it, while internet-bound bytes may also attract ordinary data-transfer charges. If a workload crosses an availability-zone boundary to reach the gateway, both network placement and the provider's charging direction can add another transfer component.
| Question | Why it changes the estimate |
|---|---|
| How many billable NAT units run? | Hourly charges may apply per gateway, active zone, or assigned VM, depending on the provider profile. |
| How much traffic remains NAT-bound? | Private service paths and endpoints can remove eligible traffic from NAT processing, but paid endpoints have their own hourly and per-GB costs. |
| Where does traffic go? | Internet egress and cross-zone transfer are separate from the NAT processing charge. |
| Are rates current? | Region, offer, contract, tier, and provider price changes can make a preset differ from the invoice. |
A cost comparison is meaningful only when every route uses the same traffic window and the same assumptions about egress. Endpoint offload is not automatically a saving, and a self-managed alternative is not complete unless its compute, operations, resilience, and remaining transfer costs are represented. Treat the result as a planning model and reconcile it against flow logs, billing exports, and the current regional rate card.
How to Use This Tool:
Map one billing month from observed traffic and the rate card that actually applies to the deployment.
- Choose the Pricing profile closest to the architecture. Set the billable gateway, active-zone, or assigned-VM count and the number of active hours.
- Enter monthly NAT-bound traffic and its unit. Estimate the shares removed through an endpoint or private path, sent to the internet, and hairpinned across zones from flow logs or billing data.
- Count public IPv4 addresses attributable to the NAT design. For a paid endpoint, enter its count, hourly rate, and processing rate; otherwise keep those charges at zero.
- Replace every loaded rate with the current regional or contract rate, then compare Monthly total, Effective cost per input GB, budget variance, and the optimization scenarios.
Interpreting Results:
Read the cost breakdown before acting on the total. A large processing line points to NAT-bound volume, a large internet line points to destination mix, and a large cross-zone line points to route placement. Endpoint cost must be compared with the NAT processing and transfer charges it replaces, not with zero.
Scenario differences are estimates under one changed assumption. No offload removes endpoint cost and sends all input traffic through NAT. No cross-zone sets the cross-zone share to zero. Schedule to 240 hours reduces active hours only when the current value exceeds 240. Add 15 points of offload caps the new share at 100%. Verify that each scenario is operationally possible before treating its difference as savings.
Technical Details:
The model converts the selected traffic quantity to gigabytes, removes the offloaded share, and applies each rate to the traffic or time base it bills. Percentages are independent planning inputs: internet-bound and cross-zone shares are both applied to the traffic that remains on NAT.
Formula Core:
Monthly cost is the sum of gateway time, NAT processing, internet egress, cross-zone transfer, public IPv4 time, and endpoint charges.
G is total input traffic in GB; p is offload percent; Go and Gn are offloaded and NAT-processed GB. N is billable NAT units, H is active hours, e is internet share, z is cross-zone share, d is charged cross-zone directions, I is public IPv4 count, and E is paid endpoint count. The r terms are the matching hourly or per-GB rates.
Lookup Core:
Built-in pricing profiles load the following planning rates. Values are USD per hour or per GB as shown and remain editable.
| Profile | Hourly | Processing/GB | Internet/GB | Cross-zone/GB | IPv4/hour |
|---|---|---|---|---|---|
| AWS zonal or regional, US East | $0.045 | $0.045 | $0.090 | $0.010 | $0.005 |
| Google Public NAT, up to 32 VMs | $0.0014 per VM | $0.045 | $0.120 | $0 | $0.005 |
| Google Public NAT, over 32 VMs | $0.044 per gateway | $0.045 | $0.120 | $0 | $0.005 |
| Google Private NAT | $0.045 | $0.045 | $0 | $0 | $0 |
| Azure editable baseline | $0.045 | $0.045 | $0.087 | $0 | $0.005 |
| Input unit | GB factor | Convention |
|---|---|---|
| GB | 1 | Base unit |
| TB | 1,000 | Decimal |
| TiB | 1,024 | Binary |
| PB | 1,000,000 | Decimal |
| PiB | 1,048,576 | Binary |
Annual cost is monthly cost multiplied by 12. Effective cost per input GB is monthly cost divided by total input GB, or zero when traffic is zero. Budget variance is budget minus monthly cost, so a negative value means the estimate exceeds the budget.
With the default AWS US East-style plan, 12 TB becomes 12,000 GB. A 25% offload leaves 9,000 GB on NAT; 70% internet share produces 6,300 egress GB and 20% cross-zone share produces 1,800 cross-zone GB. At the loaded rates, the components are $98.55 gateway time, $405 processing, $567 internet transfer, $36 cross-zone transfer, and $10.95 public IPv4, for $1,117.50 per month.
Accuracy and Pricing Notes:
Provider prices and billing definitions can change by region, date, currency, offer, tier, and contract. The built-in profiles are editable planning baselines reviewed on August 12, 2026; they are not live price feeds.
- Confirm whether the provider bills decimal GB or binary GiB. The model labels its canonical traffic unit GB and converts TB/PB with decimal factors and TiB/PiB with 1,024-based factors.
- Internet egress, cross-zone transfer, endpoints, logging, VPN, Interconnect, support, taxes, and discounts may follow separate rate cards.
- The self-managed comparison adds the entered monthly self-managed amount to modeled internet, cross-zone, IPv4, and endpoint charges. It omits managed NAT hourly and processing charges, so the entered amount must cover the replacement's compute and operating cost.
References:
- Amazon VPC pricing, Amazon Web Services.
- Cloud NAT pricing, Google Cloud.
- Azure NAT Gateway pricing, Microsoft Azure.