This article explains how Alibaba Cloud NAT Gateway uses SNAT and DNAT to mediate traffic between private VPC workloads and the public internet, and the decisions that shape a sound deployment.