Skip to content

Commit e1034b6

Browse files
adamanciniusha-mandya
authored andcommitted
update iptables=false documentation (#9482)
make it clearer that this is not intended for end-users
1 parent 2521853 commit e1034b6

1 file changed

Lines changed: 3 additions & 3 deletions

File tree

network/iptables.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -53,9 +53,9 @@ for a lot more information.
5353

5454
## Prevent Docker from manipulating iptables
5555

56-
To prevent Docker from manipulating the `iptables` policies at all, set the
57-
`iptables` key to `false` in `/etc/docker/daemon.json`. This is inappropriate
58-
for most users, because the `iptables` policies then need to be managed by hand.
56+
It is possible to set the `iptables` key to `false` in the Docker engine's configuration file at `/etc/docker.daemon.json`, but this option is not appropriate for most users. It is not possible to completely prevent Docker from creating `iptables` rules, and creating them after-the-fact is extremely involved and beyond the scope of these instructions. Setting `iptables` to `false` will more than likely break container networking for the Docker engine.
57+
58+
For system integrators who wish to build the Docker runtime into other applications, explore the [`moby` project](https://mobyproject.org/).
5959

6060
## Next steps
6161

0 commit comments

Comments
 (0)