This issue bit me, with enough NAT rules to allow poudriere jail to "escape".
Golang kindly retrieves all the missing modules in the build phase, the port works locally via poudriere, until it reaches the FreeBSD build cluster when it dies in a horrible fire of failed
connects.
tested with / without pf.conf NAT enabled, on sysutils/rest-server port with missing modules.