It depends on what protocol your gateway is using to communicate and how secure it is (see below). If you’re using the MQTT Forwarder exclusively, you don’t need a cloud Gateway Bridge. I usually prefer to run the MQTT Forwarder on the gateway.
See this thread, including the final post by @brocaar: