check outgoing connections from wis2box, reduce automatic update from container services ?

[maaikelimper]

Mexico reported a list of outgoing connections from their wis2box-instance that were blocked by their local firewall and asked us to provide feedback what these services are used for.

I suspect several services (elastics, minio, grafana) are attempting to make outgoing calls to check for updates and/or send statistics.

I analyzed the report to create the following summary listing destination URL by Network Application:

Elastic-Server

• https://d2iks1dkcwqcbx.cloudfront.net

Firefox-Captive-Portal-Test

• http://detectportal.firefox.com/canonical.html
• http://detectportal.firefox.com/success.txt?ipv4

Generic-TLS

• https://cdn03.quay.io
• https://dl.min.io
• https://ghcr.io
• https://globalbroker.meteo.fr
• https://registry.npmjs.org
• https://subnet.min.io

Generic-Web-HTTP

• http://o.pki.goog/wr2

Generic-Web-TLS

• https://community.wmo.int
• https://grafana.com

Mozilla-Services

• https://contile.services.mozilla.com
• https://incoming.telemetry.mozilla.org

Mozilla-Tracking-Protection

• https://shavar.services.mozilla.com

Pocket

• https://spocs.getpocket.com

Ubuntu

• https://metrics.ubuntu.com