Thanks for chiming in, I had no idea that was backed by actual EC2 instances and the charges make more sense now.

So that means all external traffic in a private subnet with a NAT Gateway is routed through a single instance? I’ll have to read up more on Hyperplane.