9
2
Fork
You've already forked platform
2

Port 49500 not reachable externally (possibly after reserved port migration) #256

Closed
opened 2026年05月26日 16:13:01 +02:00 by vkobel · 5 comments

After commit 318c08f (move reserved ports to 49500-49600 range), it seems STEVE and other internal services moved from ports 8080–8082 to 49500–49502. The vsock-proxy-49500.service is correctly started on the host, but external connections to port 49500 time out.

Possible root cause: The AWS security group inbound rules were not updated as part of this migration. The old ports (8080, 8081, 8082) seem still allowed; 49500–49504 are not.

Expected: The security group (or Terraform definition) should be updated to allow inbound traffic on 49500–49504 to match the new port range

After commit 318c08f (move reserved ports to 49500-49600 range), it seems STEVE and other internal services moved from ports 8080–8082 to 49500–49502. The vsock-proxy-49500.service is correctly started on the host, but external connections to port 49500 time out. *Possible root cause:* The AWS security group inbound rules were not updated as part of this migration. The old ports (8080, 8081, 8082) seem still allowed; 49500–49504 are not. *Expected:* The security group (or Terraform definition) should be updated to allow inbound traffic on 49500–49504 to match the new port range
Owner
Copy link

Thanks for the report, I verified this is the problem. Implementing a fix right now.

Thanks for the report, I verified this is the problem. Implementing a fix right now.
Owner
Copy link

Fixed via 7912b1932c. The prod deployment has been updated to this commit. Let me know if that worked please, my tests passed!

Fixed via https://codeberg.org/caution/platform/commit/7912b1932cdc0bc6bcf89d0555cd9db02d86b82f. The prod deployment has been updated to this commit. Let me know if that worked please, my tests passed!
Owner
Copy link

There is a caddy config issue I found I'm fixing right now.

There is a caddy config issue I found I'm fixing right now.
Owner
Copy link

Ok it's resolved!

Ok it's resolved!
Author
Owner
Copy link

All good now, ty!

All good now, ty!
Sign in to join this conversation.
No Branch/Tag specified
main
anton/feat/multi-user
feat/legal-publish-doc
fix/issue-119-logout-confirmation
fix/paddle-customdata-credit-mint
fix/issue-116-duplicate-ssh-key
fix/issue-265-http-port-private
fix/issue-330-remove-build-binary
feat/paddle-byoc-subscriptions
fix/issue-307-remove-apps
feat/issue-164-account-id
feat/add-tofu-lockfile-cache
feat/webauthn-discoverable-login
docs/issue-339-install-instructions
fix/issue-336-split-qr-login-tokens
fix/verify-app-source-preflight
fix/many-git-push-deploy
fix/issue-334-email-verification-throttle
fix/issue-273-billing-url
fix/issue-333-final-usage-collection
fix/issue-270-low-credit-email
fix/issue-301-remove-auto-topup
fix/issue-320-byoc-auth-first
fix/issue-348-git-progress-checklist
fix/issue-321-byoc-caution-hcl
fix/issue-332-resource-id-suspension
fix/eif-app-mode-normalization
feat/cli-stagex-container
fix/eif-s3-layer-cache
fix/authz-role-checks
fix/cli-hangs-unsupported-ssh-url
feat/print-platform-commit-dashboard
fix/config-domain-validation
anton/support-ssh-destroy-get
fix/cli-config-dir
feat/publish-build-inputs
feat/locksmith-polishing
fix/procfile-run-command-no-split
anton/byoc-require-login
fix/hcl-init-template
feat/egress-default-deny
ryansquared/hcl
quotas
anton/feat/region-routing-resource-unavailable-alert
fix/attestation-502-dashboard
ryansquared/systemdize
fix/verify-git-credential-hang
anton/fix-low-credits-alert
xenushka/rename-byoc
ryansquared/add-download-eif
add-debug-flag
test/pr1-integration-harness
anton/fix/only-pass-required-env-vars
ryansquared/add-database-bucket
No results found.
Labels
Clear labels
Compat/Breaking
Breaking change that won't be backward compatible
Component/Enclave-Builder
This issue affects Enclave Builder (git-push and CLI)
Component/Infrastructure
This issue affects generic Caution hosted infra components
Deploy/BYOC
Relates to Caution Bring-your-own-compute
Deploy/Full-managed
Relates to Caution fully managed cloud
Deploy/Self-hosted
Relates to Caution deployed on self-hosted infra
Interface/API
This issue affects the API
Interface/CLI
This issue affects the command line interface
Interface/Git
This issue affects the Git `push` interface
Interface/Web
This issue affects the web dashboard
Kind/Bug
Something is not working
Kind/Documentation
Documentation changes
Kind/Enhancement
Improve existing functionality
Kind/Feature
New functionality
Kind/Security
This is security issue
Kind/Testing
Issue or pull request related to testing
Priority
Critical
The priority is critical
Priority
High
The priority is high
Priority
Low
The priority is low
Priority
Medium
The priority is medium
Reviewed
Confirmed
Issue has been confirmed
Reviewed
Duplicate
This issue or pull request already exists
Reviewed
Invalid
Invalid issue
Reviewed
Won't Fix
This issue won't be fixed
Status
Abandoned
Somebody has started to work on this but abandoned work
Status
Blocked
Something is blocking this issue or pull request
Status
Need More Info
Feedback is required to reproduce issue or to continue work
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
caution/platform#256
Reference in a new issue
caution/platform
No description provided.
Delete branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?