3 ms·

I really like rootless podman, but there is one quirk in that if you want to preserve the original source IP address (e.g. for web server logs), you have to use

• phoronixrly 1y ago
  Correct me if I'm wrong but doesn't pasta solve this?
• eriksjolund 1y ago
  That workaround is not needed if the web server container supports socket activation. Due to the fork-exec architecture of Podman, the socket-activated socket is inherited by the container process. Network traffic sent over this socket-activated socket has native performance. https://github.com/containers/podman/blob/main/docs/tutorials/socket_activation.md#native-network-performance-over-the-socket-activated-socket https://github.com/containers/podman/blob/main/docs/tutorial...