Questions tagged [docker-networking]
57 questions
1
vote
0 answers
Docker expose a port of a container but restrict network access
I have a server A, and it runs a container B (say an SSH server). I want to allow people doing some computation on B that does not access the network.
Using docker run --publish=${MY_PORT}:22 ..., I expose container B's port to allow people to…
![](../../users/profiles/423242.webp)
Eric Stdlib
- 115
- 4
1
vote
1 answer
docker - create two container got two different network id instead of using default bridge network
My goal was, that Jenkins container will "talk" with Ansible container in order to create Jenkins file for Jenkins pipeline.
I was expected that those two container will "join" to bridge network and get 2 IP addresses of the same network id, but…
![](../../users/profiles/504011.webp)
Hiddai
- 67
- 2
- 10
1
vote
0 answers
Run docker in pre-exisiting network namespaces
I need to run a docker in a pre-existing namespace, which wasn't created by docker infrastructure. Is it possible to do ? I am aware of reusing another container option but as I mentioned the pre-existing ns wasn't created by one ( so answer to this…
![](../../users/profiles/46798.webp)
Boris
- 173
- 10
1
vote
1 answer
Nextcloud can't connect to Collabora
i've setup a docker host, and wanted to setup nextcloud with collabora-office. But it simply does not find the collabora host. my compose file is the following:
version: '3.2'
services:
db:
image: mariadb:10.5
restart: always
…
![](../../users/profiles/333683.webp)
Gooze
- 11
- 4
1
vote
0 answers
Docker Swarm, how to access private services on overlay network from an external client
I'm building a micro-service system based on Docker Swarm. Some of these services must be accessible for company's internal use only, like administrative dashboards, DBs, etc.
Services are interconnected by Docker's overlay networks, and only public…
![](../../users/profiles/627453.webp)
tmm360
- 111
- 1
1
vote
0 answers
Docker container communicate via a specific port oustide of Docker
So i'm currently facing the problem, that I'm not able to talk to a specific port, which is outside of my docker setup. To be exact:
As you can see in the docker-compose.yml down below, i'm running nginx and php in my docker setup. I'm trying to…
![](../../users/profiles/627300.webp)
Codekx
- 11
- 2
1
vote
0 answers
External loadbalancer for docker swarm in Openstack Magnum
Does anybody know how to configure an external loadbalancer for docker swarm nodes in openstack magnum? Or is it possible?
1
vote
1 answer
docker swarm container bind address other than 0.0.0.0
I got a multi-node docker swarm setup with the following interfaces:
1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope…
![](../../users/profiles/253188.webp)
tcurdt
- 363
- 3
- 9
1
vote
1 answer
Unwanted masquerading in docker container
Although I have not added any iptables rules on the host or the two containers, packets from one docker container are modified and given the IP of the docker network gateway:
Container 1:
bash-5.0# ip route
default via 172.16.238.2 dev…
![](../../users/profiles/597211.webp)
Trigus
- 41
- 5
0
votes
0 answers
How to solve "An invalid response was received from the upstream server" on Kong Gateway?
I'm using docker with compose and I've created some microservices and I'm trying to connect them through Kong Gateway.
To access the MSs with PHP I created in Nginx the reverse proxy where I can access through the URLS example…
![](../../users/profiles/276454.webp)
Vitor de Sousa
- 1
- 2
0
votes
0 answers
Docker policy-based routing
I am trying to use policy based routing on my system, the network is simple with 2 independent interfaces with independent networks..for example
NIC1 = 172.31.3.x/24
NIC2 = 172.31.1.x/24
each interface got its own gateway and have created tables in…
![](../../users/profiles/417972.webp)
Manny
- 1
0
votes
0 answers
Restricting docker zone to a single IP with firewall-cmd
I'm trying to restrict my docker exposed ports to a sigle outside IP.
docker (active)
target: ACCEPT
icmp-block-inversion: no
interfaces: br-27117bc1fd93 br-2905af95cf3a br-53c93737f17d br-69f2fcdc6f01 br-b4b3347f7b9c br-b932d5e56d55…
0
votes
1 answer
I have installed Jupyter-Lab inside a Docker container but I can't access the Jupyter web UI
Situation:
So I have installed Jupyter-Lab inside a Docker container in a VM on my network. I've then done a commit (I know this isnt the correct way to do things, I should use a Docker file).
I then go into the container bash and run jupyter-lab…
![](../../users/profiles/567457.webp)
Definity
- 115
- 3
0
votes
1 answer
the iptables chain DOCKER-USER does not seems to work
I use ipset to block IP ranges from many countries on my server (almost the entire world at the exception of France and french speaking countries).
I have two rulesets in ipset : badbadworld1 and badbadworld2
My host is running docker : one Nginx…
![](../../users/profiles/979904.webp)
Endoril
- 3
- 2
0
votes
2 answers
How to block access to a specific IP address from docker swarm services
I deployed my service with docker swarm in the Digital Ocean VPC.
I want to block access from the service to http://169.254.169.254/metadata/v1.json which is the metadata API for security reasons. Does anyone know how to do that?
Thanks,
![](../../users/profiles/977687.webp)
Quy Tang
- 1
- 5