VirtualTam's bookmarks

1. Docker and Kubernetes userland proxies, versus exposing wide port ranges

   2020-01-24
   linux/container linux/container/docker linux/container/kubernetes network network/tcp network/udp performance

   Permalink

   Docker:

   • https://github.com/moby/moby/issues/9021
   • https://github.com/moby/moby/issues/11185
   • https://github.com/moby/moby/issues/11185#issuecomment-245983651
   • https://github.com/moby/moby/issues/19017
   • https://github.com/docker/for-mac/issues/2670#issuecomment-372365274

   Kubernetes:

   • https://github.com/kubernetes/kubernetes/issues/1802
   • https://github.com/kubernetes/kubernetes/issues/23864
   • https://github.com/kubernetes/kubernetes/issues/23864#issuecomment-387070644

   Disabling userland proxy:

   • https://github.com/moby/moby/issues/5618
   • https://github.com/moby/moby/issues/14856
   • https://github.com/moby/moby/issues/11185#issuecomment-129085898

   Threads:

   • https://stackoverflow.com/questions/28717464/docker-expose-all-ports-or-range-of-ports-from-7000-to-8000
   • https://www.percona.com/blog/2016/02/05/measuring-docker-cpu-network-overhead/
   • https://forums.docker.com/t/exposing-large-range-of-ports-is-not-viable/20127/5
2. Docker & UFW

   2019-10-24
   linux/container/docker linux/iptables network security ufw

   Permalink
   • https://github.com/moby/moby#4737
   • https://github.com/docker/for-linux/issues/690
   • https://stackoverflow.com/questions/30383845/what-is-the-best-practice-of-docker-ufw-under-ubuntu
   • https://www.mkubaczyk.com/2017/09/05/force-docker-not-bypass-ufw-rules-ubuntu-16-04/
   • https://www.techrepublic.com/article/how-to-fix-the-docker-and-ufw-security-flaw/
   • https://www.linux.com/news/how-fix-docker-and-ufw-security-flaw/
   • https://svenv.nl/unixandlinux/dockerufw/
   • https://blog.viktorpetersson.com/2014/11/03/the-dangers-of-ufw-docker.html
   • https://news.ycombinator.com/item?id=27613217
3. ferm and docker playing together

   2018-12-21
   ferm linux linux/container/docker linux/iptables linux/kernel network network/firewall security

   Permalink
   • https://github.com/diefans/ferment
   • https://blog.urth.org/2018/06/01/making-docker-play-nice-with-ferm-firewalls-on-linux/
   • https://unrouted.io/2017/08/15/docker-firewall/
   • https://github.com/wikimedia/puppet/commit/74050c6233c8b5ae291d3d7f5131a587941c50ac
   • https://github.com/moby/moby/issues/12294#issuecomment-432921518
   • https://github.com/Jamesits/systemd-named-netns
4. Manage sensitive data with Docker secrets | Docker Documentation

   2018-09-27
   linux/container/docker secret security security/authentication security/password security/token

   Permalink
   • https://github.com/moby/moby/issues/13490
5. Docker - Allow COPY command's --chown to be dynamically populated via ENV or ARG · Issue #35018

   2018-09-26
   build environment linux/container/docker variable

   Permalink
   • https://stackoverflow.com/questions/51981904/cant-build-docker-multi-stage-image-using-arg-in-copy-instruction
   • https://github.com/moby/moby/issues/34129
6. Docker Who - The names of Docker

   2018-09-04
   culture history linux/container linux/container/docker science

   Permalink
   • https://github.com/moby/moby/blob/master/pkg/namesgenerator/names-generator.go
7. Share Compose configurations between files and projects | Docker Documentation

   2018-07-25
   configuration linux/container/docker linux/container/docker-compose programming/yaml

   Permalink

   Extension with Compose format 3.4+:

   • https://github.com/moby/moby/issues/31101
   • https://github.com/docker/compose/issues/4315
   • https://github.com/docker/cli/pull/452
   • https://github.com/docker/compose/pull/5140
   • https://stackoverflow.com/questions/45279662/extend-service-in-docker-compose-3

   Inheritance through YAML anchors:

   • https://stackoverflow.com/questions/14184971/more-complex-inheritance-in-yaml
   • https://web.archive.org/web/20130213112648/http://blog.101ideas.cz/posts/dry-your-yaml-files.html
   • https://gist.github.com/bowsersenior/979804
8. Moby

   2017-09-04
   linux linux/container linux/container/docker moby

   Permalink
   • https://www.mirantis.com/blog/ok-i-give-up-is-docker-now-moby-and-what-is-linuxkit/
   • https://blog.docker.com/2017/04/introducing-the-moby-project/
   • https://github.com/moby/moby