When a tier-0 logical router is running in active-active mode, you cannot configure stateful NAT where asymmetrical paths might cause issues. For active-active routers, you can configure reflexive NAT (sometimes called stateless NAT).

In this example, as packets are received from the web VM, the Tenant2NAT tier-1 router changes the source IP address of the packets from 172.16.10.10 to 80.80.80.1. Having a public source IP address enables destinations outside of the private network to route back to the original source.

Diagram showing NAT traffic

When there are two active-active tier-0 routers involved, as shown below, reflexive NAT must be configured.

Equal cost multi-path routing with two uplinks to the tier-0 logical router of each Edge node in a cluster.