AWS VPC出站流量

Question

I have a VPC in AWS with a public and a private subnet. I added an OpenVPN server to it and as long as I'm logged into the VPN I can access everything just fine. I now need to set it up so that a server in the VPC can access an external REST API. My current ACL rules are completely open. Both inbound and outbound look like this:

100 ALL Traffic ALL ALL 0.0.0.0/0 ALLOW
*   ALL Traffic ALL ALL 0.0.0.0/0 DENY

I have my security group setup to only allow internal traffic on these ports:

SSH (22)     TCP (6) 22   10.0.0.0/24
HTTP (80)    TCP (6) 80   10.0.0.0/24
HTTPS (443)  TCP (6) 443  10.0.0.0/24
MySQL (3306) TCP (6) 3306 10.0.0.0/24

My outbound traffic for the security group allows all. So I would think an outbound http request would be allowed by the security group and the ACL. But when I try wget google.com the domain is resolved but it just sits at connecting to google.com. I checked my routing table and any traffic thats not local goes to the gateway:

Destination Target       Status Propagated
10.0.0.0/24 local        Active No
0.0.0.0/0   igw-912ddaf4 Active No

Can someone point me in the right direction of how this should be set up. Or tell me why I don't have outbound traffic. Maybe at least list any other places where network traffic could be restricted on AWS's VPC. Thanks

Answer 1

您需要一个NAT实例，以便您专用子网上的系统可以访问Internet。

Answer 2

When we configure the Private Sub network we have to configure in the pub through nats and redirect it from Private.

Answer 3

It seems to me there might be some race conditions: I've been having trouble with frequent internet connection issues, I checked the docs, and tried lots of things. Just now I restarted the EC2 instance, checked that it wasn't working, then I re-applied the same network security groups by right clicking on the instance in the EC2 management console, then restarted the instance again and it suddenly started working. Perhaps someone from AWS could look into reproducing it? I will post again if I can reproduce it myself.