@mirice thanks for the follow up. It is from an allowed IP defined in the security groups, and nacl’s in AWS , yes. Im using the docker-compose on an ubuntu. routing is working though. when i start the web container interactively I can see it receives calls from the browser.