dockerd when run with --iptables=false modifies iptables by adding DOCKER-USER

If dockerd is run with --iptables=false option, it skips most of iptables stuff. But still interfere a bit. Here is what I get when run dockerd with --iptables=false:

*filter
:INPUT ACCEPT [12730:1832196]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [54:6656]
:DOCKER-USER - [0:0]
-A FORWARD -j DOCKER-USER
-A DOCKER-USER -j RETURN

Is it possible for docker not to touch iptables at all?

bump libnetwork. vishvananda/netlink 1.0, vishvananda/netns

bump libnetwork 90afbb01e1d8acacb505a092744ea42b9f167377

Navigation Menu

Repository navigation

dockerd when run with --iptables=false modifies iptables by adding DOCKER-USER #2158

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

dockerd when run with --iptables=false modifies iptables by adding DOCKER-USER #2158

Description

Activity

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions