Comment by senyapsudah for Let say I assign a public address directly to an instance and then assign the .1 address from that same subnet to said instances associated DVR router. Great, fine and dandy. Then I also assign a flat external network on the outside of that DVR router that gets it to the internet. No problem. Traffic will go out from the VM, get SNATed on to the internet just fine. But, these are my design requirements: 1 - Public ip on VM 2 - DVR router 3 - NO SNAT So the ip assigned to the VM is the ip the internet would see and respond to. I know this is possible using a direct flat network with no DVR router, but our design requirements are that there is a DVR router... Also, just to be clear, I recognize for this to work, I would need to add a route on the external router outside the DVR router to ensure return traffic gets back to the vm. Is this idea possible? Thanks!

if you have a router sitting in between your instance and internet, then you need to create a public ip as your internal network and disable snat on the router. it should be done. i believe i did it before.