search

int128 / terraform-aws-nat-instance

Terraform module to provision a NAT Instance using an Auto Scaling Group and Spot Instance from $1/month
https://registry.terraform.io/modules/int128/nat-instance/aws/
Apache License 2.0
175 stars 90 forks source link

The default security egress rule only allows TCP and blocks UDP #74

Open chrissam opened 4 months ago

chrissam commented 4 months ago

The default egress security group blocks UDP. This blocks any DNS queries made using Google, Cloudflare DNS etc.

https://github.com/int128/terraform-aws-nat-instance/blob/master/main.tf#L14

A rule should be added to allow UDP requests to fix this.