Cloud infrastructure resources for connecting a service provider private network to a customer private network

A method implemented by a system, the method comprising:

• receiving, by one or more network resources separate from a first virtual network configured for a customer and a second virtual network configured for a service provider, a request from the second virtual network for an access by a second resource to a first resource, wherein the first virtual network comprises the first resource that has a first Internet Protocol (IP) address, wherein the second virtual network comprises the second resource that has a second IP address and that is configured to provide a service to the customer based on the access by the second resource to the first resource;
• determining, by the one or more network resources, based on network address translation (NAT) mappings, a NAT mapping between the first IP address and a reserved IP address, the reserved IP address being outside a first IP address range of the first virtual network and outside a second IP address range of the second virtual network;
• and
• at least one of:
• sending, by the one or more network resources, a first packet to the second virtual network, a payload of the first packet comprising the reserved IP address;
• or
• receiving, by the one or more network resources, a second packet from the second virtual network, a header of the second packet comprising the reserved IP address as a destination address,
• wherein the access of the second resource to the first resource is based on the NAT mapping between the first IP address and the reserved IP address.

One or more non-transitory computer-readable storage media storing instructions that, upon execution on a system, cause the system to perform operations comprising:

• receiving, by one or more network resources separate from a first virtual network configured for a customer and a second virtual network configured for a service provider, a request from the second virtual network for an access by a second resource to a first resource, wherein the first virtual network comprises the first resource that has a first Internet Protocol (IP) address, wherein the second virtual network comprises the second resource that has a second IP address and that is configured to provide a service to the customer based on the access by the second resource to the first resource;
• determining, by the one or more network resources, based on network address translation (NAT) mappings, a NAT mapping between the first IP address and a reserved IP address, the reserved IP address being outside a first IP address range of the first virtual network and outside a second IP address range of the second virtual network;
• and
• at least one of:
• sending, by the one or more network resources, a first packet to the second virtual network, a payload of the first packet comprising the reserved IP address;
• or
• receiving, by the one or more network resources, a second packet from the second virtual network, a header of the second packet comprising the reserved IP address as a destination address,
• wherein the access of the second resource to the first resource is based on the NAT mapping between the first IP address and the reserved IP address.