CoreDNS unreachable inside sandbox (10.43.0.10:53 connection refused) on both macOS and Linux

[Mansoor-Haghighi]

Agent Diagnostic

• OpenClaw agent (Leo) running inside the sandbox investigated the issue
• Ran nslookup google.com → connection refused to 10.43.0.10:53
• Ran cat /etc/resolv.conf → nameserver 10.43.0.10 (k3s CoreDNS)
• Ran curl -v https://google.com → proxy at 10.200.0.1:3128 returns 403 Forbidden
• Tested on Mac (Docker Desktop) AND GCP Linux (Docker Engine) — identical failure
• CoreDNS pod shows Running via kubectl get pods -A but port 53 is unreachable from sandbox
• Tried: adding DNS policy (port 53 to 10.43.0.10), HOSTALIASES, manual IP injection — none worked
• Conclusion: CoreDNS service IP is not routable from within sandbox pods

Description

DNS resolution fails inside every sandbox. CoreDNS is listed as Running but 10.43.0.10:53 is unreachable (connection refused) from sandbox pods. This breaks all internet-dependent features (web search, WebSocket connections, channel logins). The HTTP proxy at 10.200.0.1:3128 exists but returns 403 for most domains.

Expected: DNS resolution works inside the sandbox so agents can access the internet.

Reproduction Steps

1. openshell gateway start
2. openshell provider create --name my-claude --type anthropic --credential api_key=KEY
3. openshell sandbox create --name steve --from openclaw --provider my-claude
4. Inside sandbox: nslookup google.com
5. Result: connection refused to 10.43.0.10:53

Environment

• OS: macOS (Docker Desktop) AND Debian 12 on GCP e2-medium
• Docker: Docker Engine 29.3.0 (GCP), Docker Desktop (Mac)
• OpenShell: v0.0.12 (GCP), v0.0.11 (Mac)
• Both environments show identical failure

Logs

Agent-First Checklist

• I pointed my agent at the repo and had it investigate this issue
• I loaded relevant skills (e.g., debug-openshell-cluster, debug-inference, openshell-cli)
• My agent could not resolve this — the diagnostic above explains why

[johntmyers]

Blocking direct DNS and network connections is intended. Network connections need to go through the proxy. This is configured for most applications (such as Claude and NodeJS) already, especially with the --from openclaw you are using. Within your sandbox are you able to run curl -s -v https://api.anthropic.com - this should route through the proxy.