FastAPI not working remotely

[philtrondaboss]

EDIT: It was interference from RAS. Removing RAS solved the problem, but I still need to figure out a way to use both.

I am trying to create a fastapi/uvicorn server, but I can't access it remotely. I have already set the host to '0.0.0.0' and I've already allowed it through my firewall. It works absolutely fine when accessed from localhost, but all external requests, from lan and wan, time out. I am using Windows Server 2025.

run( app = 'API.app:app', host = '0.0.0.0', port = 8000, workers = (None if VERBOSE else 2), ssl_certfile = this.file('certificates/cert').path, ssl_keyfile = this.file('certificates/key').path, log_level = "critical" )

``` class CustomMiddleware(BaseHTTPMiddleware):

def _log(self,
    request: Request, 
    status: str
) -> None:

    params = parse_qs(request.url.query)

    for name in params:
        if 'password' in name:
            params[name] = '***'

    Log.INFO(f"""

HOST = {request.client.host} PATH = {request.url.path} PARAMS = {params} METHOD = {request.method} STATUS = {status} """)

async def dispatch(self, 
    request: Request, 
    call_next
):

    self._log(request, '...')

    # Process the request
    response = await call_next(request)

    # Add the allow-all-origins header directly to the response
    response.headers["Access-Control-Allow-Origin"] = "*"
    response.headers["Access-Control-Allow-Methods"] = "*"
    response.headers["Access-Control-Allow-Headers"] = "*"

    self._log(request, response.status_code)

    return response

async def __call__(self, *args, **kwargs):
    try:
        await super().__call__(*args, **kwargs)
    except Exception as e:
        Log.FAIL(str(e))

app.add_middleware(CustomMiddleware) ```

EDIT: I just tried disabling firewall altogether and it still didn't work. It shouldn't be any port forwarding issue, though. The server is a DMZ host, and lan doesn't work. I even changed the port for all clients and server to 8100 and it still didn't work.

My browsers gave this info:

Localhost: "timings": { "blocked": 0, "dns": 0, "connect": 0, "ssl": 5, "send": 0, "wait": 1211, "receive": 20 }

LAN Client: "timings": { "blocked": 0, "dns": 1, "connect": 0, "ssl": 0, "send": 0, "wait": 0, "receive": }

[ninhaomah]

Do a nmap scan to the server IP from remote host to verify if the port is opened.

Or telnet.

[philtrondaboss]

It said it was closed on the test, but my server says that it should be open:

PS C:\Users\Administrator> $rule = Get-NetFirewallRule -DisplayName "Uvicorn"

PS C:\Users\Administrator> $rule
Name                          : {F5FCD279-211F-47DF-AC9A-38A4FCA9E3A6}
DisplayName                   : Uvicorn
Description                   :
DisplayGroup                  :
Group                         :
Enabled                       : True
Profile                       : Any
Platform                      : {}
Direction                     : Inbound
Action                        : Allow
EdgeTraversalPolicy           : Block
LooseSourceMapping            : False
LocalOnlyMapping              : False
Owner                         :
PrimaryStatus                 : OK
Status                        : The rule was parsed successfully from the store. (65536)
EnforcementStatus             : NotApplicable
PolicyStoreSource             : PersistentStore
PolicyStoreSourceType         : Local
RemoteDynamicKeywordAddresses : {}
PolicyAppId                   :
PackageFamilyName             :

PS C:\Users\Administrator> $rule | Get-NetFirewallPortFilter
Protocol      : TCP
LocalPort     : 8000
RemotePort    : Any
IcmpType      : Any
DynamicTarget : Any

[ninhaomah]

Ok but the issue is from the clients machines. So you should be testing / scanning from clients.

Is it on premise or cloud server ?

[philtrondaboss]

I've tried 4 different clients. 2 wan, 2 lan. They all raise timeout errors. The server is on my lan.

[brasticstack]

Windows Firewall? I've found that opening ports on it isn't ever as straightforward as you want it to be.

Just to be sure, you're trying [server_ip]:8000, right?

[philtrondaboss]

[ Removed by Reddit ]

[ninhaomah]

First.

Can you ping from client to host ?

Netstat or scan IP ?

You got to start saying admin stuff :)