2 ms·
It should, however, restrict the source ip address range to 127.0.0.1/8 and the in-interface to the loopback interface: Chain DOCKER (2 references) p
by 0xbadcafebee 4y ago
It should, however, restrict the source ip address range to
127.0.0.1/8 and the in-interface to the loopback interface:
Chain DOCKER (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT tcp -- lo docker0 127.0.0.1/8 172.17.0.2 tcp dpt:5432
I think this would break intra-container network communication, since containers on docker1 (172.17.1.2) would not be coming from source 127.0.0.0/8 or device lo. Docker would need to create an explicit rule matrix from/to each container in each network (does it already do this?)