3 ms·
> My current policy is to set `"iptables": false` in Docker's `daemon.json` on any public machine. I don't understand why this isn't the default. If you don't
by Nullabillity 6y ago
> My current policy is to set `"iptables": false` in Docker's `daemon.json` on any public machine. I don't understand why this isn't the default.
If you don't muck with iptables then you need a (slow) userspace proxy to expose your pods. That also means losing things like the source IP address for any incoming connections.
- l3s2d 6y agoInteresting, I haven't noticed any slowdown, but I am running fairly low traffic services. I do see that RemoteAddr is from a private IP range. Luckily I'm not using this information anywhere, but good to know.