A central NAT manager efficiently allocates ports to endpoints of a tenant application in a hosting environment for NAT purposes. In some instances, the central NAT manager may pre-allocate ports to endpoints as part of the initial configuration of the tenant application. The pre-allocation process may include persisting pre-allocated port state information in storage and configuring endpoints and a NAT device with the pre-allocated port state information. Additional ports may be dynamically allocated to endpoints during runtime using dynamically determined port allocation sizes. In other instances, the central NAT manager may reserve ports for endpoints during the initial configuration of the tenant application by assigning ports to endpoints and persisting port assignment information to storage. During runtime, endpoints may issue port allocation requests to the central NAT manager, which may allocate ports to the endpoints from the range of ports initially reserved for each endpoint.