Gateways

Logical next hops connect tenant subnets to external providers, VPN concentrators, or transit fabrics. They apply default routes, SNAT, and sometimes BGP advertisements. Broken gateway config yields asymmetric routing or hairpinned traffic.