You want to configure a NAT to perform address translation between your on-premises network blocks and GCP.
Which NAT solution should you use?
A. Cloud NAT
B. An instance with IP forwarding enabled
C. An instance configured with iptables DNAT rules
D. An instance configured with iptables SNAT rules
C is right
https://ipwithease.com/snat-vs-dnat/
https://cloud.google.com/nat/docs/overview#architecture
C
A is correct: https://cloud.google.com/nat/docs/overview
C would be the answer . Cloud NAT is just for outbound NAT. in order to forward incoming session to private GCP address space you need DNAT internet facing instance.