Browse this section

Tag Cloud

billing cloud dedicated managed infrastructure operations private security start storage

Support

Container ports and management interfaces

A container being reachable from its host does not mean it should be reachable from the Internet. Published container ports and host firewall settings must be reviewed together. Docker can manage firewall rules itself, which changes how some traffic is processed.

Review the exposure

  • List published ports and the interfaces they bind to; identify which endpoints should be public, private or host-only.
  • Keep administrative APIs, databases and dashboards behind the agreed restricted access path.
  • Review runtime privileges, mounted host directories and access to the container-management socket.
  • Test allowed and blocked connections from appropriate external and internal locations after changes.

Do not assume a host firewall rule alone blocks every published container port. Send the deployment topology and redacted configuration if you need a review. Avoid exposing a container-management API without a designed authentication and network-control arrangement.

Further reading: Docker: packet filtering and firewalls

Was this guide helpful?

Related guides

Preparing secure SSH access

Use individually assigned access where practical so changes can be attributed and access can be revoked without affecting everyone. SSH keys are useful for authentication, but the private k…

Requesting a firewall rule without losing access

A firewall request should describe a required communication path, not simply ask to open all traffic. Both provider-side and operating-system rules may affect a connection. Plan the change …

TLS certificate issuance and renewal checks

A valid certificate needs the correct names, a trusted chain and a working renewal process. HTTPS protects the connection; it does not prove that the application itself is free of vulnerabi…

What to send us when you suspect a compromise

Treat unexpected administrator accounts, changed files or suspicious processes as evidence to investigate. A successful malware scan does not establish that a system is clean. Use a trusted…

Need help applying this to your service?

Tell us your service reference and what you need to achieve. Never include passwords or private keys in a ticket.

Contact support →
← All knowledgebase topics