Post #2701670
2026-05-09 12:52 UTC
still wild to me that it's not straightforward to define a network policy for a container to say something like “you can only connect to these IPs+ports”.
I'm assuming it's doable if you spend some time carefully crafting specific networks for docker and fiddle with iptables/nftables, but urgh.
Replies (1)
-
@mroach@ublog.mroach.com 2026-05-09 12:55
@piger@mastodon.social Same. I’ve wanted variations on this for a while. Kubernetes has that but I don’t see any reason docker shouldn’t be able to do that natively. Solutions you see out there are using docker compose with service mode networking and a container acting as a router. So clunky