amazon web services - Can't connect out from my EC2 instance unless allow all traffic inbound -
i have issue linux ec2 instance can't outbound(ping, curl, yum update, wget, traceroute, etc..) unless have rule in vpc acl inbound rule set allows traffic.
my security group , vpc both have outbound rules allows traffic everything.
the security group inbound list attached instance looks this:
and vpc inbound list looks this(rule 200 1 i'm talking about):
if delete inbound rule allows traffic(rule 200), can't outbound.
could there i'm missing ? thanks!
acl rules stateless, means don't keep track of outbound connections when evaluating inbound connections. if make outbound connection server, acl rule block server's response unless have explicitly allowed inbound connections server in acl.
this 1 of primary reasons people use security groups (which stateful) instead of acl rules. looking @ network acl rules, there nothing happening there isn't covered security group rules, why use acls?
Comments
Post a Comment