Docker Settings (docker.toml)
By default, the docker settings are located here:
/etc/kor-elf-shield/docker.tomlThe path to these settings can be changed in the main settings and can be found here (parameter docker).
A copy of the full settings file is located here.
Attention: to work correctly, you need to add the settings "iptables": false in Docker. If you have not changed the settings in Docker, then you need to create a file /etc/docker/daemon.json with the contents:
{
"iptables": false
}After that, do not forget to reboot Docker or the OS.
Attention: to work correctly Docker , you need to add the appropriate settings to the file. firewall.toml:
[[ips]]
ips = ["172.16.0.0/12"]
action = "accept"
directions = ["out", "in"]If you want stricter rules, you can configure them separately for each container firewall.toml. The main thing to remember is that the port to which the request is being sent will not inbe, but out. And if there is an interaction between containers, then you need to specify in . For example:
# backend
[[ips]]
ips = ["172.16.0.0/12"]
action = "accept"
directions = ["out"]
ports = ["3000", "5000", "9000", "8080"]
# mysql
[[ips]]
ips = ["172.16.0.0/12"]
action = "accept"
directions = ["in"]
ports = ["3306"]| Parameter | enabled |
| Meaning | true or false |
| By default | false |
| Description | Enables docker support. true - includes false - turns it off |
| Examples |
|
| *** | |
|---|---|
| Parameter | rule_strategy |
| Meaning | rebuild or incremental |
| By default | incremental |
| Description | A strategy for managing rules when starting or stopping containers in Docker: rebuild - with any change, all chains Docker are recreated entirely. incremental - only the rules of a specific container are added or removed. |
| Examples |
|