2.18 Disable Userland Proxy

Information

http://windsock.io/the-docker-proxy/
2.https://github.com/docker/docker/issues/14856
3.https://github.com/docker/docker/issues/22741
4.https://docs.docker.com/engine/userguide/networking/default_network/binding/

Solution

Run the Docker daemon as below-dockerd --userland-proxy=falseImpact-Some systems with older Linux kernels may not be able to support hairpin NAT and
therefore require the userland proxy service. Also, some networking setups can be
impacted by the removal of the userland proxy.Default Value-By default, the userland proxy is enabled.

See Also

https://workbench.cisecurity.org/files/517

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7b.

Plugin: Unix

Control ID: b721f61fd175cfc2b0e1e4ea91700348a905e720a950b2b2c78005d02191e480