aboutsummaryrefslogtreecommitdiff
path: root/releasenotes/notes/docker-disable-iptables-e9a248a0515f30a6.yaml
blob: 9c2bb93526684822dbab16f20d2093a7f7010add (plain)
1
2
3
4
5
6
7
8
9
10
11
12
---
features:
  - |
    Adds a new flag, ``docker_disable_default_iptables_rules``, which
    defaults to ``no``. Docker is manipulating iptables rules by
    default to provide network isolation, and this might cause
    problems if the host already has an iptables based firewall.
    A common problem is that Docker sets the default policy of the
    ``FORWARD`` chain in the ``filter`` to ``DROP``.
    Setting ``docker_disable_default_iptables_rules`` to ``yes``
    will disable Docker's iptables manipulation. This feature will be
    enabled by default from the Victoria 11.0.0 release.