• rocket_launch Getting started
  • tune Configuration
  • sync_alt High availability
  • swap_horiz NAT64
  • deployed_code OpenTofu module
  • badge Instance role
  • monitoring CloudWatch agent
  • shield Hardening
  • compare_arrows natkit and fck-nat
  • build Building
    • to navigate
    • to select
    • to close
      • Home
      On this page

      Docs

      rocket_launch

      Getting started

      Launch the AMI and route a private subnet through it.

      tune

      Configuration

      The YAML user-data keys.

      sync_alt

      High availability

      An Auto Scaling group of one, a static ENI and an EIP.

      swap_horiz

      NAT64

      Jool translates 64:ff9b::/96 for IPv6-only subnets.

      deployed_code

      OpenTofu module

      tofu/nat sets up the HA layout.

      badge

      Instance role

      The IAM permissions natkit needs.

      monitoring

      CloudWatch agent

      Metrics from the CloudWatch agent, pulled at boot.

      shield

      Hardening

      What natkit leaves out and locks down.

      compare_arrows

      natkit and fck-nat

      How natkit maps fck-nat's pieces.

      build

      Building

      Build the image and AMI, and how CI tests them.


      © 2026 natkit. MIT licensed.