kotovalexarian-likes-github
/
moby--moby
mirror of https://github.com/moby/moby.git
1
0
Fork 0
Code Releases Activity
Moby Project - a collaborative project for the container ecosystem to assemble container-based systems
2,901 Commits 10 Branches 356 Tags 299 MiB
Go 97.5%
Shell 1.3%
Dockerfile 0.6%
PowerShell 0.3%
Makefile 0.1%
Go to file
Su Wang fcb70a0e86 DOCKER-USER chain not created when IPTableEnable=false. 
This fix addresses https://docker.atlassian.net/browse/ENGCORE-1115
Expected behaviors upon docker engine restarts:
1. IPTableEnable=true, DOCKER-USER chain present
   -- no change to DOCKER-USER chain
2. IPTableEnable=true, DOCKER-USER chain not present
   -- DOCKER-USER chain created and inserted top of FORWARD
      chain.
3. IPTableEnable=false, DOCKER-USER chain present
   -- no change to DOCKER-USER chain
      the rational is that DOCKER-USER is populated
      and may be used by end-user for purpose other than
      filtering docker container traffic. Thus even if
      IPTableEnable=false, docker engine does not touch
      pre-existing DOCKER-USER chain.
4. IPTableEnable=false, DOCKER-USER chain not present
   -- DOCKER-USER chain is not created.

Signed-off-by: Su Wang <su.wang@docker.com>
 		2019-11-12 16:32:42 +00:00
libnetwork DOCKER-USER chain not created when IPTableEnable=false. 2019-11-12 16:32:42 +00:00