Pinging external hosts from container in AKS

Doggeman 6

Hi,

I'm trying to ping an external host (say 8.8.8.8) from a standard linux container running inside AKS. Curling and higher level protocols to the same host works fine.

Someone mentioned that you need an external LB for this to work and I have multiple within the same namespace.
I've tried with both kubenet and azure-cni as the network model, same results, no replies.

I've also tried by allowing all traffic on all ports and protocols in the NSG that gets created with the cluster but no luck there either.

Best,
Douglas

Winston 2,766 Reputation points

2020-09-28T23:41:45.703+00:00

Hi @Doggeman ,

You should be able to send traffic externally from your AKS container with an external load balancer. Can you try to create a new load balancer through this guide for your AKS Cluster and then let me know where it fails? It shouldn't be overly complex so it might be best to start fresh. Thanks!
Winston 2,766 Reputation points

2020-09-30T18:26:53.853+00:00

Hi @Doggeman ,

Just following up. Were you able to resolve your issue?
Doggeman 6 Reputation points

2020-10-01T09:23:49.737+00:00

Hi @WinstonHoward-MSFT,

As I mention in the original post I have External LB's, they are equivalent to the doc you sent me. TCP and UDP traffic is fine externally it's ICMP (ping) that doesn't work.
I'm in talks with Azure support as well and it seems the only way to solve it is to define a user define route that doesn't go via the LB (where ICMP is blocked).
egress-outboundtype

Could be helpful for anyone else looking to solve this problem.
Winston 2,766 Reputation points

2020-10-01T17:08:04.763+00:00

Hey @Doggeman ,

Thanks for sharing the details of your support interaction. So by defining a custom route you were successfully able to use ICMP outbound from an AKS Container Instance? Just want to repost the correct solution for others. Thanks again for sharing your details.

Share via

Pinging external hosts from container in AKS