Docker Networking Cookbook

Chapter 6. Securing Container Networks

In this chapter, we will cover the following recipes:

• Enabling and disabling ICC
• Disabling outbound masquerading
• Managing netfilter to Docker integration
• Creating custom iptables rules
• Exposing services through a load balancer

Introduction

As you move toward container-based applications, one of the items you'll want to put some serious consideration toward is network security. Containers, in particular, can lead to a proliferation in the number of network endpoints that need to be secured. Granted, not all endpoints are fully exposed to the network. However, those that aren't, by default, talk directly to each other, which can cause other concerns. There are many ways to tackle network security when it comes to ...