A method for controlling communication between a virtualized network and a non-virtualized entity, comprising: receiving, by a host hosting a virtual machine in a data center, a packet sent by the virtual machine to the non-virtualized entity and addressed to an application address of a physical resource of the non-virtualized entity; encapsulating, by the host, the packet with a location address of a virtualization gateway according to a first mapping policy which maps the application address of the physical resource of the non-virtualized entity to the location address of the virtualization gateway, to provide an encapsulated packet, wherein the application address corresponds to an IP address of the virtual machine, is used by the virtual machine, and can be shared with one or more other virtual machines in the data center, and wherein the location address is used by a physical machine, such as the host, the location address being unique in the data center; sending, by the host, the encapsulated packet to the virtualization gateway; receiving, by the virtualization gateway, the encapsulated packet; decapsulating, by the virtualization gateway, the received packet, to provide a decapsulated packet; performing, by the virtualization gateway, a network address translation, NAT, of the decapsulated packet to provide a NAT packet, in which a NAT application address has been set as source address, and in which the application address of the physical resource of the non-virtualized entity is kept as destination address; re-writing, by the virtualization gateway, the NAT packet according to a second mapping policy to provide a second NAT packet, said second mapping policy mapping the application address of the physical resource of the non-virtualized entity to a location address of the physical resource of the non-virtualized entity, and said second NAT packet indicating that the second NAT packet is being sent from a NAT location address to the location address of the physical resource of the non-virtualized entity; and sending, by the virtualization gateway, the second NAT packet to the location address of the physical resource of the non-virtualized entity. receiving, by a host hosting a virtual machine in a data center, a packet sent by the virtual machine to the non-virtualized entity and addressed to an application address of a physical resource of the non-virtualized entity; encapsulating, by the host, the packet with a location address of a virtualization gateway according to a first mapping policy which maps the application address of the physical resource of the non-virtualized entity to the location address of the virtualization gateway, to provide an encapsulated packet, wherein the application address corresponds to an IP address of the virtual machine, is used by the virtual machine, and can be shared with one or more other virtual machines in the data center, and wherein the location address is used by a physical machine, such as the host, the location address being unique in the data center; wherein the application address corresponds to an IP address of the virtual machine, is used by the virtual machine, and can be shared with one or more other virtual machines in the data center, and wherein the location address is used by a physical machine, such as the host, the location address being unique in the data center; sending, by the host, the encapsulated packet to the virtualization gateway; receiving, by the virtualization gateway, the encapsulated packet; decapsulating, by the virtualization gateway, the received packet, to provide a decapsulated packet; performing, by the virtualization gateway, a network address translation, NAT, of the decapsulated packet to provide a NAT packet, in which a NAT application address has been set as source address, and in which the application address of the physical resource of the non-virtualized entity is kept as destination address; re-writing, by the virtualization gateway, the NAT packet according to a second mapping policy to provide a second NAT packet, said second mapping policy mapping the application address of the physical resource of the non-virtualized entity to a location address of the physical resource of the non-virtualized entity, and said second NAT packet indicating that the second NAT packet is being sent from a NAT location address to the location address of the physical resource of the non-virtualized entity; and sending, by the virtualization gateway, the second NAT packet to the location address of the physical resource of the non-virtualized entity.