Ec2 and security group

[hasan-yousefi]

Hi
i have recently up ec2 and assigns security group to allow port 80 but i don't know how use it my configuration

aws ec2 authorize-security-group-ingress   --group-id sg-2a0fbfad78b5e5e85   --protocol tcp   --port 80   --cidr 0.0.0.0/0 --endpoint-url $AWS_ENDPOINT_URL
aws ec2 modify-instance-attribute   --instance-id i-63621f9b70bebf2b1 --groups sg-2a0fbfad78b5e5e85

don't you think to port 80 must be open ? if yes how do that when create ec2 command? we use by sg on aws but it's container

[hectorvent]

Hey @hasan-yousefi,

I missed this discussion.

Mapping port to EC2 will be mapped to your host. Algo mapping port 80 will requiere root docker access. Happy discus further what you are looking for.

[VectorPeak]

Security group only allows traffic to reach the EC2 instance. The container still needs to publish its port on the host.

Example when creating the EC2 instance:

aws ec2 run-instances \
 --image-id ami-xxxx \
 --instance-type t3.micro \
 --security-group-ids sg-2a0fbfad78b5e5e85 \
 --subnet-id subnet-xxxx

Then run the container with a host port mapping:

docker run -p 80:3000 your-image

where 3000 is the port your app listens on inside the container. If you use Compose:

services:
 app:
 image: your-image
 ports:
 - "80:3000"

Also check that the app inside the container listens on 0.0.0.0, not 127.0.0.1, otherwise Docker port publishing will not make it reachable externally.

[hectorvent]

Yeah, this is a missing mapping that floci needs to manage. I will create an issue from this.

[hectorvent]

Issue #1678

[hasan-yousefi]

thanks alot @hectorvent