Rob Murray cf3e42abaf Add an opt-out for iptables 'raw' rules ...

For kernels that don't have CONFIG_IP_NF_RAW, if the env
var DOCKER_INSECURE_NO_IPTABLES_RAW is set to "1", don't
try to create raw rules.

This means direct routing to published ports is possible
from other hosts on the local network, even if the port
is published to a loopback address.

Signed-off-by: Rob Murray <rob.murray@docker.com>

2025-03-10 18:32:49 +00:00

..

skip=false_ipv4.golden

Add an opt-out for iptables 'raw' rules

2025-03-10 18:32:49 +00:00

skip=false_ipv6.golden

Add an opt-out for iptables 'raw' rules

2025-03-10 18:32:49 +00:00

skip=true_ipv4.golden

Add an opt-out for iptables 'raw' rules

2025-03-10 18:32:49 +00:00

skip=true_ipv6.golden

Add an opt-out for iptables 'raw' rules

2025-03-10 18:32:49 +00:00