# No public internet access from pod?

**URL:** <https://forums.suse.com/t/no-public-internet-access-from-pod/37367>\
**Category:** k3s, k3OS, and k3d\
**Created:** [March 23, 2022, 9:35pm UTC](https://forums.suse.com/t/no-public-internet-access-from-pod/37367 "2022-03-23T21:35:58Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![apiening](https://avatars.discourse-cdn.com/v4/letter/a/a4c791/32.png) [@apiening](https://forums.suse.com/u/apiening)\
**Post date:** [March 23, 2022, 9:35pm UTC](https://forums.suse.com/t/no-public-internet-access-from-pod/37367/1 "2022-03-23T21:35:58Z")

</div>

Hi there,

I’m running

```bash
# k3s -v
k3s version v1.22.7+k3s1 (8432d7f2)
go version go1.16.10

```

on

```bash
# cat /etc/os-release
NAME="Ubuntu"
VERSION="20.04.4 LTS (Focal Fossa)"
ID=ubuntu
ID_LIKE=debian
PRETTY_NAME="Ubuntu 20.04.4 LTS"
VERSION_ID="20.04"
HOME_URL="https://www.ubuntu.com/"
SUPPORT_URL="https://help.ubuntu.com/"
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"
VERSION_CODENAME=focal
UBUNTU_CODENAME=focal

```

running `AWX` based on this guide: [Install AWX on K3S - Bitbull Wiki](https://www.bitbull.ch/wiki/index.php/Install_AWX_on_K3S)

The application is running fine and I can log in to the web interface, but when I trigger an action that accesses the internet (a git checkout in this case) I get a connection error after a timeout of 90 seconds:

```auto
Failed to connect to github.com port 443: Connection timed out

```

I can access the repository URL from the host / node with the command line web browser `links` without issues and there is no firewall enabled on the host.

Any idea what may cause this issue?

---

<div class="post-metadata">

**Author:** ![apiening](https://avatars.discourse-cdn.com/v4/letter/a/a4c791/32.png) [@apiening](https://forums.suse.com/u/apiening)\
**Post date:** [March 28, 2022, 3:15pm UTC](https://forums.suse.com/t/no-public-internet-access-from-pod/37367/2 "2022-03-28T15:15:35Z")

</div>

I tried to dig into this issue a litte more and entered the container and ran this command:

```bash
# curl https://www.google.com
curl: (7) Failed to connect to www.google.com port 443: Connection timed out

```

Unfortunately there are not tools like `route` , `netstat` and not even `ping` available in the container.

Any hint on this issue would be greatly appreciated.

---

<div class="post-metadata">

**Author:** ![apiening](https://avatars.discourse-cdn.com/v4/letter/a/a4c791/32.png) [@apiening](https://forums.suse.com/u/apiening)\
**Post date:** [May 9, 2022, 7:31pm UTC](https://forums.suse.com/t/no-public-internet-access-from-pod/37367/3 "2022-05-09T19:31:41Z")

</div>

This issue was solved in an issue discussion, see: [Can't reach internet from pod / container · Issue #5349 · k3s-io/k3s · GitHub](https://github.com/k3s-io/k3s/issues/5349)

Summary: The default port range for outgoing connections is `32768 to 60999` and there was a default firewall rule allowing `TCP` packets with the `ACK` flag from within this range.  
Since `k3s` uses all possible ports for outgoing connections, some of them were below `32768` and the reply packets was blocked by the firewall.