natkit
A NAT instance AMI for AWS, arm64 and x86_64. fck-nat’s features on LinuxKit, as an immutable in-memory image.
Open source, MIT licensed.
What you get
lock
Immutable
A minimal kernel, containerd and a handful of service containers, all in memory. No package manager, SSH or SSM agent.
sync_alt
Highly available
An Auto Scaling group of one with a static ENI and an EIP. A replacement takes the ENI first, then the EIP.
swap_horiz
NAT64
Jool translates 64:ff9b::/96 for IPv6-only subnets, paired with Route 53 Resolver DNS64.
description
One YAML file
fck-nat’s settings as YAML user-data. One line on the serial console says ready or why not.
monitoring
CloudWatch
The CloudWatch agent, pulled by digest at boot only when you enable it.
deployed_code
OpenTofu module
tofu/nat sets up the instance, ENI, EIP, routes and a scoped instance role.