dockeriptables

Restrict connections to the Docker daemon - What should be the value of ext_if

I tend to restrict connections to my Docker daemons, using host iptables

https://docs.docker.com/network/iptables/#restrict-connections-to-the-docker-daemon

The example given is

$ iptables -I DOCKER-USER -i ext_if ! -s 192.168.1.1 -j DROP

I was wondering, what should be the value of ext_if, and how I can figure out the value for ext_if?

Solution

  • This works pretty well for me

    iptables -I DOCKER-USER -i eth0 -p tcp --dport 5555 -j DROP

    However, I'm not sure the correct step, to get eth0. It is just my try-n-error way.