A method may include receiving a first network traffic flow that is associated with a first private network address. The first network traffic flow may be destined to a first external network address. The method may include determining that the first external network address is not identified by a data structure. The data structure may identify external network addresses and private network addresses of network traffic flows to which a single public network address has been assigned. The method may include assigning the single public network address to the first network traffic flow based on determining that the first external network address is not identified by the data structure. The method may include storing the first external network address and the first private network address. The method may include outputting the first network traffic flow with the first external network address and the single public network address.