What a NAT VPS is, and who it suits

What a NAT VPS is, and who it suits - What a NAT VPS is, and who it suits

A NAT VPS sits exactly in the middle: it has full root like any VPS, but costs less, because you do not get an IPv4 address of your own. It is worth understanding what that means before you order.

What the server gets

Every NAT VPS gets a public IPv6 address of its own. It answers on that address directly, on any port, for anyone with IPv6 connectivity.

For IPv4, the server has an internal address behind NAT. Outgoing traffic works normally: you install packages, download updates, call APIs, connect bots to Discord or Telegram. The difference shows up for incoming connections: for those you get, on request, 20 consecutive ports on the node's public IPv4 address, each forwarded to the same port number inside your server.

What runs well on it

Bots that connect outwards on their own, so they need no open ports. Game servers that accept a custom port. Monitoring such as Uptime Kuma or Prometheus, checking other servers. Test environments and build runners. Internal applications you reach over IPv6 or through the ports you received.

The containers are unprivileged LXC on Proxmox VE: root inside the container has no rights on the node, so your server stays isolated from other customers.

What it is not for

A website that must be reachable on ports 80 and 443 for everyone. Standard ports cannot be allocated to a single customer, because the node's IPv4 address is shared. The site works directly over IPv6, and for IPv4 visitors you need a proxy that accepts IPv6-only origins.

Likewise, if you need an IPv4 address to put on an allow-list or to build a mail server's reputation, NAT is not the answer: outgoing traffic leaves from the node's address, shared with other customers.

What stays with you

The operating system, your applications, their updates and security. Backups of your data. The included traffic resets on the 1st of every month, and if you use it all before then the server is suspended until the next reset, so pick a plan with headroom if you expect peaks.

From the client area you get a browser console, reboot, reinstall with any of the Linux images, and usage graphs.