Gateway configuration using a network manager

A system comprising:

• a first configurable network programmed with a first set of network addresses;
• a second configurable network programmed with a second set of network addresses;
• a gateway connecting the first configurable network to a client private network and the second configurable network to the client private network;
• and
• one or more server computers configured to:
• generate routing information for the gateway, wherein the routing information restricts the network addresses within the first and second configurable networks that are reachable from the client private network to non-overlapping network address spaces within each of the first configurable network and the second configurable network;
• and
• use the generated routing information to configure the gateway for forwarding network packets between the client private network and the first configurable network and between the client private network and the second configurable network.

A method comprising:

• determining respective sets of network addresses assigned to each of a first configurable network, a second configurable network, and a client private network;
• determining a set of network addresses to share among two or more of the first configurable network, the second configurable network, and the client private network;
• using one or more server computers to generate routing information for a network gateway that connects the first configurable network, the second configurable network, and the client private network, wherein the routing information restricts the network addresses that are reachable within the first configurable network from outside of the first configurable network to addresses that do not overlap with the respective sets of network addresses assigned to the second configurable network and the client private network, the one or more server computers being external to the network gateway;
• and
• using the generated routing information to configure the network gateway for forwarding network packets among the client private network, the first configurable network, and the second configurable network.