Internet Gateway Capacity Calculator
Check whether your instance fleet can carry peak internet egress through an internet gateway, including the single-flow limit.
Inputs
Egress Headroom
400.0%
Aggregate Fleet Bandwidth
60.00Gbps
Peak Egress Required
12.00Gbps
Instances Needed at Peak
2
Single-flow Check
A single flow cannot exceed 5 Gbps — shard the transfer across parallel connections
Step by step
Values used
Peak internet egress required = 12,000 Mbps; Instances carrying internet traffic = 6 instances; Network bandwidth per instance = 10 Gbps; Largest single TCP flow = 6 Gbps; Single-flow limit that applies = 5 Gbps — to the internet or across Availability Zones
Internet Gateway Capacity
aggregate = instances × per-instance bandwidth; headroom = (aggregate − required) ÷ required; instances needed = ceil(required ÷ per-instance bandwidth).
Egress Headroom
= 400.0
Aggregate Fleet Bandwidth
= 60.00 Gbps
Peak Egress Required
= 12.00 Gbps
Instances Needed at Peak
= 2
Single-flow Check
= A single flow cannot exceed 5 Gbps — shard the transfer across parallel connections
How it works
An internet gateway is horizontally scaled and imposes no bandwidth limit of its own, so the real ceiling is the sum of the network allowances of the instances behind it. A second, easily missed ceiling applies per flow: traffic to the internet is capped at 5 Gbps for any single flow regardless of how fast the instance is, rising to 10 Gbps only inside a cluster placement group. Teams routinely blame the gateway when a single large transfer stalls at 5 Gbps, when the fix is parallel connections or a larger instance rather than a network redesign.
Formula
Internet Gateway Capacity
aggregate = instances × per-instance bandwidth; headroom = (aggregate − required) ÷ required; instances needed = ceil(required ÷ per-instance bandwidth).
- per-instance bandwidth
- Baseline or burst network performance of the instance type
- required
- Peak internet egress in Gbps
- per-flow limit
- Ceiling on a single TCP or UDP flow
Frequently Asked Questions
How is Internet Gateway Capacity calculated?
aggregate = instances × per-instance bandwidth; headroom = (aggregate − required) ÷ required; instances needed = ceil(required ÷ per-instance bandwidth). An internet gateway is horizontally scaled and imposes no bandwidth limit of its own, so the real ceiling is the sum of the network allowances of the instances behind it. A second, easily missed ceiling applies per flow: traffic to the internet is capped at 5 Gbps for any single flow regardless of how fast the instance is, rising to 10 Gbps only inside a cluster placement group.
Why does Internet Gateway Capacity matter?
Teams routinely blame the gateway when a single large transfer stalls at 5 Gbps, when the fix is parallel connections or a larger instance rather than a network redesign.
What values do I need to enter?
This calculator takes 5 inputs: Peak internet egress required, Instances carrying internet traffic, Network bandwidth per instance, Largest single TCP flow, Single-flow limit that applies. The pre-filled defaults are a realistic starting point — replace them with figures from your own environment for a result you can act on.
Does an internet gateway itself throttle traffic?
No. AWS documents the internet gateway as horizontally scaled, redundant and highly available with no availability risk or bandwidth constraint. Throughput limits come from the instances, their network allowances and burst credits, and the per-flow cap.
Why is my single download stuck at 5 Gbps?
Each flow — one 5-tuple of source IP, source port, destination IP, destination port and protocol — is limited to 5 Gbps to the internet. Multiplying the connections, as multipart S3 transfers do, is what unlocks the rest of the instance allowance.
You might also need
- NAT Gateway Cost CalculatorCommonly used together
- Direct Connect Bandwidth CalculatorCommonly used together
- VPN Throughput CalculatorCommonly used together
- Application Load Balancer Capacity CalculatorAlso in AWS Networking
- CloudFront Cost CalculatorAlso in AWS Networking
- VPC CIDR CalculatorAlso in AWS Networking