4 ms·
We never let Docker set its own iptables rules. It is a pain at first, but it forces you to understand how the rules work, what is going on, and has the added b
by andrewguenther 10y ago
We never let Docker set its own iptables rules. It is a pain at first, but it forces you to understand how the rules work, what is going on, and has the added bonus of keeping those rules consistent across Docker releases and in your own version control.
- m_mueller 10y agoso as I understand you add and remove the port mapping and other FW entries with your own scripts whenever you spin up / stop a container?
- andrewguenther 10y agoPort mapping isn't handled by iptables, only the wiring of the docker virtual interface. We take care of that piece, but let docker do whatever it wants within that interface.