Is it possible to have an EC2 VPC with a public subnet and a private subnet, but without having to have a NAT box? The servers on the private network would not need to talk to the outside world, just to a load balancer on the public network (which also has a private address).

1 Answer 1


Yes, if the servers in your private subnet really never need to talk to the outside world (they don't download software updates? Don't use public NTP servers?), then you don't need a NAT gateway for them. And the servers in your public subnet don't need a NAT box, they will route through an EC2 Internet gateway.

  • How, then, do I delete the NAT instance? Or if I can't delete it, is terminating it sufficient to not get charged for it?
    – Isvara
    Aug 20, 2013 at 5:35
  • Remove it from your routing tables and then terminate it.
    – Mike Scott
    Aug 20, 2013 at 12:11

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.