A subnet configured so it can't be reached directly from the internet.
When outbound access is needed, it's routed through a NAT gateway. It's typically used as the internal or data layer in a multi-tier architecture.
© 2026 ITBGM