Pcluster CLI executing commands over the Internet

I have a use case where the HeadNodes are not exposed to the Internet, specially port for SSH, and when running pcluster commands from a proxy in the AWS network doesn’t work, as the pcluster CLI seems to go to the public IP of the headnode

`2022-05-30 03:29:04,393 - DEBUG - dcv_connect.py:142:_retry() - ssh: connect to host XXXX.118 port 22: Connection timed out`

Adding a specific security group rule to allow the SSH connection from the public IP works without problems.

Is it possible that this tool, checks if it can reach the private IP of the headnode first ?

Thanks

Start in dcv_connect.py at line 142, where the retry log shows the SSH connection to the public head-node address timing out. Trace how the pcluster CLI selects the head-node address and check the existing connection path for private reachability. Done means commands work when head nodes are not Internet-exposed, without requiring SSH access from the public IP.

Written by the indexing model from the issue text.