Docker Engine v28: Hardening Container Networking by Default

3 password4321 1 5/13/2025, 2:03:34 AM docker.com ↗

Comments (1)

password4321 · 6h ago
Docker networking defaults have been tightened up but per https://github.com/moby/moby/issues/22054#issuecomment-28714...:

the default binding address is still 0.0.0.0.

There are now rules in raw-PREROUTING to drop packets sent from outside the host to container addresses, and to ports mapped to the loopback address. Rules in the filter-FORWARD chain no longer depend on its default policy.