Our freshly minted Haskell apps running inside Nix closures on AMIs are somehow throwing "Connection refused errors" on addresses and ports that are very much open and telnettable from the machine...
connect(3, {sa_family=AF_INET, sin_port=htons(9092), sin_addr=inet_addr("52.20.114.33")}, 16) = -1 EINPROGRESS (Operation now in progress)
clock_gettime(CLOCK_MONOTONIC, {2267, 491936504}) = 0
select(4, [], [3], NULL, {0, 988827}) = 1 (out [3], left {0, 987760})
getsockopt(3, SOL_SOCKET, SO_ERROR, [0], [4]) = 0
fcntl(3, F_GETFL) = 0x802 (flags O_RDWR|O_NONBLOCK)