What is the best practice of docker + ufw under Ubuntu

Problem This problem has been around for a long time. Disable iptables in Docker will take other problems. Rollback changes first If you have modified your server according to the current solution that we find on the internet, please rollback these changes first, including: Enable Docker’s iptables feature. Remove all changes like –iptables=false , including … Read more

Is there a way for non-root processes to bind to “privileged” ports on Linux?

Okay, thanks to the people who pointed out the capabilities system and CAP_NET_BIND_SERVICE capability. If you have a recent kernel, it is indeed possible to use this to start a service as non-root but bind low ports. The short answer is that you do: setcap ‘cap_net_bind_service=+ep’ /path/to/program And then anytime program is executed thereafter it … Read more