lain icon indicating copy to clipboard operation
lain copied to clipboard

Published 20 hours ago • verified publisher icon laincloud

swarm-manager 所在 node 上的任意容器都可以访问 2376 端口

Open wchaoyi opened this issue 7 years ago • 1 comments

关于 2376 的 default calico rule 没有生效。

wchaoyi avatar May 31 '17 08:05 wchaoyi

iptables_04 iptables的nat表会先于filter表生效，匹配到nat表中的DOCKER chain后就不会匹配filter表中calico的chain了

Chain DOCKER (2 references)
 pkts bytes target     prot opt in     out     source               destination
    8   480 RETURN     all  --  docker0 *       0.0.0.0/0            0.0.0.0/0
    4   240 DNAT       tcp  --  !docker0 *       0.0.0.0/0            0.0.0.0/0            tcp dpt:2376 to:172.17.0.2:2375

liuxu623 avatar Sep 05 '17 04:09 liuxu623