Sold by: abyo software
Deployed on AWS
Free Trial
S4 NAT gives the private subnets in your Amazon VPC cost-optimized internet egress (source NAT) on a standard EC2 instance: billed as a flat hourly software fee plus the EC2 instance you pick - with NO per-GB data-processing charge, so your cost is predictable and decoupled from egress volume. Ships as an Amazon Linux 2023 AMI with active/standby high availability (route failover typically under 10 seconds), an opt-in stable-egress mode that keeps your egress public IP constant across failover, built-in NAT64 for IPv6-only subnets, and an optional XDP fast path. Deploy in minutes with the included CloudFormation templates.
Overview
S4 NAT gives the private subnets in your Amazon VPC cost-optimized internet egress, built on a standard EC2 instance. It performs source NAT (MASQUERADE) for your private subnets so they can reach the internet, and you pay only a flat hourly software fee plus the price of the instance you choose - there is no per-GB data-processing charge, so the cost is predictable and decoupled from egress volume. Bandwidth scales with the instance type you select.
High availability is built in. Deploy the active/standby CloudFormation template and the standby continuously heartbeats the active; on failure it rewrites the private route table(s) to its own ENI via ec2:ReplaceRoute, typically completing route failover in well under ten seconds (validated over 170+ consecutive failover drills across releases, in the v1.1 round 74/74 route flips under 11 seconds including test-harness dispatch latency). Optionally, enable the stable-egress mode (StableEgressIp) and a shared Elastic IP rides the route owner, keeping the egress public IP your downstream allowlists constant across failover - typically stabilizing in under ten seconds, with an availability-first design that briefly falls back to the instance's own Elastic IP rather than dropping traffic if the IP move lags (validated with client-side egress sampling: longest observed non-shared window 2 seconds, zero black-holes). New connections succeed immediately. Note this is fast failover, not hitless: in-flight (established) connections are reset and clients reconnect, which is acceptable for the short-lived, auto-retrying connections that dominate NAT egress.
Beyond cost and HA, S4 NAT includes NAT64 (RFC 6146, via an integrated translator) so IPv6-only subnets can reach the IPv4 internet, and an optional XDP/eBPF fast path (shipped on the AMI, enabled with one config line) that offloads established-flow forwarding below the kernel networking stack - measured at roughly 2x the packets-per-second per CPU core of the standard kernel path on network-optimized instances, with automatic interface tuning for native attach. The kernel nftables path remains the default, fully supported data plane. The control-plane daemon is a single static binary with a least-privilege IAM role. There is no lock-in - it is a normal Amazon Linux 2023 AMI you run in your own VPC. Billed per instance per hour through your AWS bill.
Highlights
- No per-GB data-processing fee: you pay only a flat hourly software fee plus the EC2 instance you choose, so your NAT bill is predictable and decoupled from egress volume.
- High availability built in: an active/standby pair across AZs fails over by rewriting the route table(s) (ec2:ReplaceRoute), typically in under 10 seconds - validated over 170+ consecutive drills across releases. An opt-in stable-egress mode keeps the egress public IP constant across failover via a shared Elastic IP, with a no-blackhole availability-first fallback. (Fast failover, not hitless: in-flight connections reset; new ones succeed immediately.)
- Batteries included, no lock-in: built-in NAT64 (RFC 6146) for IPv6-only subnets, an optional XDP/eBPF fast path shipped on the AMI (~2x pps per core measured vs the kernel path), and CloudFormation templates (single + HA) - all on a standard Amazon Linux 2023 AMI in your own VPC.
Details
Sold by
Categories
Delivery method
Delivery option
64-bit (Arm) Amazon Machine Image (AMI)
CloudFormation Quick Launch
Latest version
Operating system
AmazonLinux 2023
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Free trial
Try this product free for 14 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/hour |
|---|---|---|
c6gn.large Recommended | c6gn.large | $0.10 |
c6gn.4xlarge | c6gn.4xlarge | $0.10 |
c8gn.2xlarge | c8gn.2xlarge | $0.10 |
c6i.large | c6i.large instance, hourly | $0.10 |
c7gn.2xlarge | c7gn.2xlarge | $0.10 |
c6in.4xlarge | c6in.4xlarge instance, hourly | $0.10 |
c6gn.2xlarge | c6gn.2xlarge | $0.10 |
c6g.large | c6g.large | $0.10 |
t4g.small | t4g.small | $0.10 |
c6gn.8xlarge | c6gn.8xlarge | $0.10 |
Dimensions summary
You pay a flat hourly software fee tied to the EC2 instance type you run. There is no per-GB data-processing charge, so your cost stays fixed regardless of egress volume. The many dimensions here are the same product priced across different instance types, spanning general-purpose (t3, t4g, m6g, m7g) and network-optimized compute (c6g, c6gn, c6i, c6in, c7gn, c8g, c8gn) families in Arm and x86 variants. Pick a size based on the bandwidth you need, since throughput scales with the instance. Larger instances carry a higher hourly rate. Billing is per instance-hour, with an annual option available.
Top-of-mind questions for buyers
The hourly software fee meters running instance-hours. A fully stopped instance does not accrue the software charge, though underlying AWS storage for the volume may still apply. In an active/standby pair, both running instances meter their own hours while active.
Your software and EC2 cost stays flat regardless of egress volume. There is no per-GB data-processing charge. Growth in traffic only matters when you outgrow an instance's bandwidth and choose a larger size. Standard AWS data-transfer-out charges still apply separately.
Bandwidth ties to the EC2 instance type, not a fixed managed ceiling. The vendor measured about 4.78 Gbps through a c6in.large. Network-optimized families (c6gn, c6in, c7gn, c8gn) scale higher than general-purpose ones. Size the instance for the throughput you require.
abyo.net
Helpful?
Vendor refund policy
Email support@abyo.net within 30 days of a charge to request a refund; refunds are evaluated case by case.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (Arm) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
v1.2.0: one-command zero-drift rolling upgrades for the HA pair (deploy/upgrade-ha.sh, validated live: v1.1.0 to v1.2.0 in about 2.5 minutes, standby-first, no CloudFormation drift). Official Terraform module and CDK construct included. New XDP fast-path CloudWatch metrics (XdpFastPathPacketsPerSec and friends) plus per-instance EipSynced/conntrack alarms, and an EnableXdpFastPath one-toggle parameter on all templates. FIXED (latent since v1.0): CloudWatch alarms/dashboards now bind to the actual emitted metric series. Metrics are keyed by the InstanceId dimension only; if you built custom dashboards using the former Role dimension, drop it (role state = the OwnsRoutes value). Instance roles now include AmazonSSMManagedInstanceCore for the upgrade tooling and Session Manager access.
Additional details
Usage instructions
Deploy via the included CloudFormation templates (cfn-ha.yaml / cfn-single.yaml), the Terraform module (deploy/terraform), or the CDK construct. HA stable egress: StableEgressIp=true + secondary IPs. XDP fast path: EnableXdpFastPath=true. Software upgrades on a running pair: deploy/upgrade-ha.sh --stack <name> --ami <new>. See /opt/s4-nat/README.md.
Support
Vendor support
Email support at support@abyo.net .
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Self-contained EC2 AMI of the S4 transparent S3 compression gateway with CPU codecs (zstd / gzip) preinstalled. Launch on any general-purpose or compute-optimized instance (t3 / m6i / m7i / c6i / c7i), point your S3 clients at it, and cut S3 storage bytes 50-80 percent for compressible data with zero application changes.
Self-contained EC2 AMI of the S4 transparent S3 compression gateway with NVIDIA nvCOMP GPU codecs preinstalled. Launch on a GPU instance (g4dn / g5 / g6), point your S3 clients at it, and cut S3 storage bytes 50-80 percent for compressible data with zero application changes.
Drop-in S3-compatible gateway that transparently compresses every object (CPU zstd or GPU nvCOMP), cutting S3 storage bytes 50-80 percent for compressible data with zero application changes. Includes pre-deployment savings estimation and measured-savings reporting.
Drop-in S3-compatible gateway that transparently compresses every object, cutting S3 storage bytes 50-80 percent for compressible data with zero application changes. This edition bills by measured savings: you pay per GB of backend storage avoided, per hour, at roughly one third of the avoided storage cost.
Cut your CloudWatch custom-metric bill: govern metric cardinality at ingest, then auto-baseline and roll up savings across your whole AWS Organization.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.