I want to close my containers running in Docker to the outside world. Brute-force attacks are constantly coming to my mysql port. I don't know how to prevent it. I add rules in ip tables, rules don't work. I don't…
I am writing a program that takes a snapshot of iptable rules so that they can be restored at a later point. I don't want to write the rules to a file; I store them as a string in my…
I have a freshly created kubernetes cluster set on 2 nodes, both nodes are open to the internet. I can curl, ping etc. any web. The problem appear when I try to do the same from pod. eg. curl to…
I am new to aws and created an EC2 instance to start migrating my source code from DigitalOcean. The problem is that I can't access any open ports on my EC2 other than port 22 through the ssh client. Here…
I want block outgoing traffic to the ip (eg-DB) in IP tables in K8s. I know that in K8s ip tables exist only at node level. and I'm not sure in which file changes should be made and what is…
I would like to be able to prevent docker containers connected to a bridge network from accessing my local network in order to add extra security since they will be accessible from outside (in case a container is compromised). I…
I'd like to set up a private cloud network using docker-compose that is only accessible via WireGuard. The private network contains multiple services but no service should be accessible from the internet and containers internal to the network should not…
I am currently setting up a kubernetes cluster (bare ubuntu servers). I deployed metallb and ingress-nginx to handle the ip and service routing. This seems to work fine. I get a response from nginx, when I wget the externalIP of…
I have an application that is running in Docker configured with an NGINX reverse proxy. The application is a binary, I don't have source code and there's no way to modify the header of an HTTP request from the app…
I have the same problem that was solved here, trying to create iptables rules that block incoming HTTP/HTTPS traffic except for IPs other than Cloudflare. Docker container accessible only via Cloudflare CDN (selected ip ranges) This works great except for…