Show HN: Network-filter – domains-based whitelist for Docker containers

2 txprog 0 8/20/2025, 12:27:38 AM github.com ↗
Built this because LLM tools with MCP servers (OpenCode, Goose, Claude code, etc.) have too much network access. It uses network_mode: 'service:x' to force containers through iptables rules that drop everything except whitelisted domains. No proxy - operates at the network namespace level so bypasses aren't possible.

Comments (0)

No comments yet