Daemon config - Changing to userland-proxy: true
does not undo route_localnet=1
#45578
Labels
area/networking/proxy
area/networking
kind/bug
Bugs are bugs. The cause may or may not be known at triage time so debugging may be needed.
status/0-triage
version/24.0
Description
Niche bug (Discovered while looking into
userland-proxy
setting differences):userland-proxy: false
, docker networks will enablesysctl net.ipv4.conf.$iface.route_localnet=1
.userland-proxy: true
, this is not reverted until restart of the host?Effectively the same behaviour as previously reported with IPTables NAT rules.
userland-proxy: true
should not tamper with the setting if it's enabled.userland-proxy: false
it's required to be enabled forlocalhost:port
routing to containers.Reproduce
Expected behavior
If Docker set
route_localnet
, it should unset it whenuserland-proxy
changes totrue
.Unless as a precaution
route_localnet
is not disabled. This is not documented however, and may result in unexpected behaviour.docker version
Client: Docker Engine - Community Version: 24.0.0 API version: 1.43 Go version: go1.20.4 Git commit: 98fdcd7 Built: Mon May 15 18:50:53 2023 OS/Arch: linux/amd64 Context: default Server: Docker Engine - Community Engine: Version: 24.0.0 API version: 1.43 (minimum version 1.12) Go version: go1.20.4 Git commit: 1331b8c Built: Mon May 15 18:49:18 2023 OS/Arch: linux/amd64 Experimental: true containerd: Version: 1.6.21 GitCommit: 3dce8eb055cbb6872793272b4f20ed16117344f8 runc: Version: 1.1.7 GitCommit: v1.1.7-0-g860f061 docker-init: Version: 0.19.0 GitCommit: de40ad0
docker info
Additional Info
No response
The text was updated successfully, but these errors were encountered: