amazon web services - Can't connect out from my EC2 instance unless allow all traffic inbound -


i have issue linux ec2 instance can't outbound(ping, curl, yum update, wget, traceroute, etc..) unless have rule in vpc acl inbound rule set allows traffic.

my security group , vpc both have outbound rules allows traffic everything.

the security group inbound list attached instance looks this:

enter image description here

and vpc inbound list looks this(rule 200 1 i'm talking about):

enter image description here

if delete inbound rule allows traffic(rule 200), can't outbound.

could there i'm missing ? thanks!

acl rules stateless, means don't keep track of outbound connections when evaluating inbound connections. if make outbound connection server, acl rule block server's response unless have explicitly allowed inbound connections server in acl.

this 1 of primary reasons people use security groups (which stateful) instead of acl rules. looking @ network acl rules, there nothing happening there isn't covered security group rules, why use acls?


Comments

Popular posts from this blog

javascript - Clear button on addentry page doesn't work -

c# - Selenium Authentication Popup preventing driver close or quit -

tensorflow when input_data MNIST_data , zlib.error: Error -3 while decompressing: invalid block type -