Only Private use the NAT instance