The fact that docker still, in 2026, will completely overwrite iptables rules si... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

callamdelaney 4 months ago | parent | context | favorite | on: A decade of Docker containers

The fact that docker still, in 2026, will completely overwrite iptables rules silently to expose containers to external requests is, frankly, fucking stupid.

netrem 4 months ago [–]

Indeed. I've had even experienced sysadmins be surprised that their ufw setup will be ignored.

Consider applying for YC's Fall 2026 batch! Applications are open till July 27.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact