NAT Gateway is a fully managed service that securely routes internet traffic from a private virtual network with enterprise-grade performance and low latency.
Hello Anil Kumar Jakka
- You can consider using Site-to-Site or VNET-to-VNET connection between your Spoke VNETS and Hub VNET with NAT and BGP Enabled
- Enabling NAT is to solve the problem of overlapping address ranges
- Enabling BGP is to have transit routing to OnPrem via the VPN Gateway
-
- More configuration info on How to configure BGP for Azure VPN Gateway
-
NOTE:
- This means, you have to deploy VPN Gateways in all the Spoke VNETs
- And also, you must consider the maximum number of connections the Hub Gateway SKU can support
- See : Gateway SKUs comparison
- Global VNet Peering is not suitable for overlapping IPs because it does not support NAT.
- NAT Gateway in Azure is for outbound internet traffic only, not for VNet-to-VNet NAT.
Additionally, you can use vWAN in scenarios where you need more than 100 S2S VPN tunnels.
I hope this was helpful!
If the above is unclear or you are unsure about something, please add a comment below.