At the moment the Jenkins master will connect to the internal or external IP depending on whether there is an external IP attached to the agent. In some cases there will be an external IP attached to reach the internet but the master should still use the internal IP of its agents as to not have to haripin back from the internet.

There should be an explicit setting for whether the master should reach out over the internal or external IP of an instance.