On the Cerner Engineering blog:

https://engineering.cerner.com/blog/identifying-network-acl-issues-with-chef-locally/