POSITIONAL ARGUMENTS

NAME

Name of the NAT to create

REQUIRED FLAGS

--router=ROUTER

The Router to use for NAT.

Exactly one of these must be specified:

--auto-allocate-nat-external-ips

Automatically allocate external IP addresses for Cloud NAT

--nat-external-ip-pool=IP_ADDRESS,[IP_ADDRESS,...]

External IP Addresses to use for NAT

Exactly one of these must be specified:

--nat-all-subnet-ip-ranges

Allow all IP ranges of all subnetworks in the region, including primary and secondary ranges, to use NAT.

--nat-custom-subnet-ip-ranges=SUBNETWORK[:RANGE_NAME],[...]

List of subnetwork primary and secondary IP ranges to be allowed to use NAT. [SUBNETWORK]: including a subnetwork name includes only the primary subnet range of the subnetwork. [SUBNETWORK]:[RANGE_NAME]: specifying a subnetwork and secondary range name includes only that secondary range.It does not include the primary range of the subnet.

--nat-primary-subnet-ip-ranges

Allow only primary IP ranges of all subnetworks in the region to use NAT.

OPTIONAL FLAGS

--async

Display information about the operation in progress, without waiting for the operation to complete.

--enable-logging

Enable logging for the NAT. Logs will be exported to Stackdriver. NAT logging is disabled by default. To disable logging for the NAT, use $ gcloud alpha compute routers nats update MY-NAT \ --no-enable-logging --router ROUTER --region REGION

--icmp-idle-timeout=ICMP_IDLE_TIMEOUT

Timeout for ICMP connections. See $ gcloud topic datetimes for information on duration formats.

--log-filter=LOG_FILTER

Specify a filter for logs exported to stackdriver. This can be one of the following: ERRORS_ONLY - export logs for connection failures only. TRANSLATIONS_ONLY - export logs for successful connections only. Without a filter, logs (if enabled) will be exported for all connections handled by this NAT.
If logging is not enabled, filter settings will be persisted but will have no effect. Use --[no-]enable-logging to enable and disable logging.
To clear the filter, use $ gcloud alpha compute routers nats update MY-NAT \ --clear-log-filter --router ROUTER --region REGION
LOG_FILTER must be one of:

ERRORS_ONLY

Export logs for connection failures only.

TRANSLATIONS_ONLY

Export logs for successful connections only.

--min-ports-per-vm=MIN_PORTS_PER_VM

Minimum ports to be allocated to a VM

--region=REGION

Region of the NAT to create. If not specified, you may be prompted to select a region.
To avoid prompting when this flag is omitted, you can set the compute/region property:

$ gcloud config set compute/region REGION

A list of regions can be fetched by running:

$ gcloud compute regions list

To unset the property, run:

$ gcloud config unset compute/region

Alternatively, the region can be stored in the environment variable CLOUDSDK_COMPUTE_REGION.

--tcp-established-idle-timeout=TCP_ESTABLISHED_IDLE_TIMEOUT

Timeout for TCP established connections. See $ gcloud topic datetimes for information on duration formats.

--tcp-transitory-idle-timeout=TCP_TRANSITORY_IDLE_TIMEOUT

Timeout for TCP transitory connections. See $ gcloud topic datetimes for information on duration formats.

--udp-idle-timeout=UDP_IDLE_TIMEOUT

Timeout for UDP connections. See $ gcloud topic datetimes for information on duration formats.

GCLOUD WIDE FLAGS

EXAMPLES

$ gcloud alpha compute routers nats create nat1 --router=my-router
  --auto-allocate-nat-external-ips --nat-all-subnet-ip-ranges

$ gcloud alpha compute routers nats create nat1 --router=my-router
  --nat-external-ip-pool=ip-address1,ip-address2

$ gcloud alpha compute routers nats create nat1 --router=my-router
  --auto-allocate-nat-external-ips
  --nat-custom-subnet-ip-ranges=subnet-1,subnet-3:secondary-range-1

NOTES

$ gcloud compute routers nats create $ gcloud beta compute routers nats create