Firewall for the container in docker

Question

How to know network interface of the container after running docker ?

Requesting simple examples of setting firewall for the container in docker.

Pavel Nuzhdin · Accepted Answer · 2013-03-29 05:43:20Z

1

Ok, I asked that question on IRC. If you need to deny/allow access to something from all containers you can use lxcbr0 interface.

Ip addresses of each containers are changed dynamicly after containers are started. Iptables rules should be runned dynamicly after each container was started. It would possible after that issue https://github.com/dotcloud/docker/issues/252 would be resolved, inside hook you can run inspect command to know ip address, for example:

$ sudo ./docker inspect 7c0154dbf88c2498dda9d42e58b6d6f0896368fa986cb2559f08a424cf1107ac
2013/03/29 12:34:02 docker inspect 7c0154dbf88c2498dda9d42e58b6d6f0896368fa986cb2559f08a424cf1107ac
{
     //...
    "NetworkSettings": {
       "IpAddress": "10.0.3.2",
       "IpPrefixLen": 24,
       "Gateway": "10.0.3.1",
       "PortMapping": {}
    },
    //...
}

answered Mar 29, 2013 at 5:43

Pavel Nuzhdin

8541 gold badge8 silver badges19 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Firewall for the container in docker

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related