Distributed network address translation over network environments

A method comprising:

• executing a virtual network overlay on a physical server of an underlay of physical servers;
• establishing, by a first edge node of the virtual network overlay, a connection to a client device having a device address;
• sending, by the first edge node, a first registration message to a control plane node of the virtual network overlay;
• looking up, by the control plane node, a NAT policy;
• assigning, by the control plane node, a public subnet address to the client device as a NAT address based on the NAT policy;
• recording, by the control plane node, a first mapping and a second mapping between the device address and the assigned NAT address, each of the first mapping and the second mapping being associated with the first edge node;
• sending, by the control plane node, a confirmation message to the first edge node indicating the first mapping and the second mapping between the device address and the NAT address;
• establishing, by a second edge node of the virtual network overlay, a connection to the client device;
• sending, by the second edge node, a second registration message to the control plane node, the first registration message and the second registration message respectively comprising a same Endpoint ID (EID) of the client device;
• and
• updating, by the control plane node, each of the first mapping and the second mapping from being associated with the first edge node to being associated with the second edge node.

A system comprising:

• one or more processors;
• and
• one or more non-transitory computer-readable media storing computer-executable instructions that, when executed by the one or more processors, cause the one or more processors to:
• establish, by a first edge node of the virtual network overlay, a connection to a client device having a device address;
• send, by the first edge node, a first registration message to a control plane node of the virtual network overlay;
• look up, by the control plane node, a network address translation (NAT) policy;
• assign, by the control plane node, a public subnet address to the client device as a NAT address based on the NAT policy;
• record, by the control plane node, a first mapping and a second mapping between the device address and the assigned NAT address, each of the first mapping and the second mapping being associated with the first edge node;
• send, by the control plane node, a confirmation message to the first edge node indicating the first mapping and the second mapping between the device address and the NAT address;
• establish, by a second edge node of the virtual network overlay, a connection to the client device;
• send, by the second edge node, a second registration message to the control plane node, the first registration message and the second registration message respectively comprising a same Endpoint ID (EID) of the client device;
• and
• update, by the control plane node, each of the first mapping and the second mapping from being associated with the first edge node to being associated with the second edge node.