Post #2023253

@voltagex Yeah, exactly. With this it will work like any other, for example, VM solution would work, where every VM has its own v6 IP and uses that to talk to external services directly. So same thing here, as it should be with IPv6. Notably the feature to expose container ports still works perfectly, so by default the containers are not reachable from the outside, but if you expose a port via Docker, it will create a firewall rule to allow that ingress. And you can of course still use a reverse proxy as the single point of ingress. That's what I do in my setup. All containers have their own public v6 addresses, but they only allow incoming connections from the reverse proxy.