Any idea why requests to external IPs on weird port numbers are timing out?

Hi,

Any idea why requests to external IPs are timing out?

I am trying to proxy http requests hitting a linode compute node on which an nginx reverse proxy is installed.

The requests are incoming on ports 80/443 and are supposed to be proxied to an on premise server listening on ports 1080/10443.

The problem is that nginx connection are timeing out, when trying to call my on premise server.

Note that by calling directly my server on the 2 mentioned ports, I get a response instantly, when the url is opened in a browser windows.

When I tried to opened the same URL from the linode instance using wget, I've got the same behavior nginx was showing:

wget: can't connect to remote host (#.#.#.#): Operation timed out

Playing with the firewall outbound configurations: opening all ports or just the relevant ones, didn't helped either.

Any idea what is going on here? Something seems to be blocking those outbound requests at linode instance level.

Note that I haven't done much changes on this node, other than installing nginx.

Thanks

1 Reply

This is especially complicated since you are dealing with on-prem endpoints, not just making sure that the reverse proxy properly connects $DOMAIN:$PORT to a service running in that Linode. Your firewall rules will need to be setup to not only allow traffic to reach your Linode and go outbound to the endpoint, but you will also need to deal with your local firewall and likely configure port forwarding rules on the router.

What internal or Cloud Firewall rules are configured for this Linode; is there anything that would block outgoing traffic? Can you ping the endpoint IP directly from the Linode, and have you attempted a port scan of your endpoint IP to determine if the port is open, closed, or filtered for you? Are there any local network security features that would be preventing you from connecting the Linode to the on-prem endpoint?>

Reply

Please enter an answer
Tips:

You can mention users to notify them: @username

You can use Markdown to format your question. For more examples see the Markdown Cheatsheet.

> I’m a blockquote.

I’m a blockquote.

[I'm a link] (https://www.google.com)

I'm a link

**I am bold** I am bold

*I am italicized* I am italicized

Community Code of Conduct