AWS App Runner timing out on outbound HTTPS requests
I have an AppRunner service connected to a VPC:
In my VPC, I attached the Internet Gateway also the NAT Gateway in each subnet. You can see here the resource map:
My AppRunner instance is under a security group that have this outbound rules:
I ran the Reachability Analyzer, selecting each network interface from my AppRunner instance and trying to reach the 8.8.8.8 ip. Here is an exemple of the result I have:
In my AppRunner instance, the application have to access to internet resources. However it fails in timeout requesting those resources ex:
Unhandled exception. System.Net.Http.HttpRequestException: Connection timed out (xxx-bucket.s3.eu-west-1.amazonaws.com:443)
Can anyone help me to find what I'm missing here?
Regards,
- Newest
- Most votes
- Most comments
I finally found my problem.
Regarding the result of the reachability analyzer, we can see that the final destination is on the NAT gateway. The destination must be the Internet Gateway of the public network.
I had configured a single routing table for my environment and applied it to both the private and public networks which caused this error.
The solution should be as follows.
**Routing table of the public network **
| Destination | Target |
|---|---|
| <VPC Local CIDR> | local |
| 0.0.0.0/0 | internet-gateway-id |
Routing table of the private network
| Destination | Target |
|---|---|
| <VPC Local CIDR> | local |
| 0.0.0.0/0 | nat-gateway-id |
In the end, the reachability analyzer should indicate the destination as the Internet Gateway:
Regards,
Relevant content
- asked 2 years ago
- asked 2 years ago
AWS OFFICIALUpdated a year ago- AWS OFFICIALUpdated a year ago
