Update software on VM with Internal IP

[Tricia_103_Lyon]

What is the best practices way to load & update software on a Debian VM that has only an internal IP?
(Can't use get-apt since no external IP) 

[kumards]

Hi @Tricia_103_Lyon ,

Have you considered using Cloud NAT?

[Tricia_103_Lyon]

Thanks, kumards - this is a possibility that I've considered, but I was hoping for a simpler, less costly solution.  

[kumards]

I don't know if there's another way, @Tricia_103_Lyon . But I'll watch this thread to learn more.

[PetePlatt]

The simplest way I can think of without NAT would be a lightweight VM running squid locked down to just the repos you want to use. It's still a small extra cost so you could schedule it to start just before your patching window and shut down afterwards, or maybe a free tier VM would be enough for a proxy to a single host if you're not already using your quota?