Otdfbt

Why doesn't shell automatically fix "useless use of cat"?

Why are there uneven bright areas in this photo of black hole?

Keeping a retro style to sci-fi spaceships?

Is it safe to harvest rainwater that fell on solar panels?

What is preventing me from simply constructing a hash that's lower than the current target?

How can I have a shield and a way of attacking with a ranged weapon at the same time?

Did Scotland spend $250,000 for the slogan "Welcome to Scotland"?

Can a flute soloist sit?

What can I do if neighbor is blocking my solar panels intentionally

Will it cause any balance problems to have PCs level up and gain the benefits of a long rest mid-fight?

"as much details as you can remember"

Is it ok to offer lower paid work as a trial period before negotiating for a full-time job?

How to quickly solve partial fractions equation?

Can you cast a spell on someone in the Ethereal Plane, if you are on the Material Plane and have the True Seeing spell active?

Is bread bad for ducks?

A female thief is not sold to make restitution -- so what happens instead?

How to type this arrow in math mode?

How to charge AirPods to keep battery healthy?

How do you keep chess fun when your opponent constantly beats you?

Dropping list elements from nested list after evaluation

Accepted by European university, rejected by all American ones I applied to? Possible reasons?

Geography at the pixel level

Short story: man watches girlfriend's spaceship entering a 'black hole' (?) forever

Short story: child made less intelligent and less attractive

From docker network to localhost port with snat iptable

.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;

0

I created a docker network with follow code:

docker network create --subnet=172.18.0.0/16 dockernet

After run a my docker container with:

 docker run -d --net=dockernet --ip 172.18.1.1 --name mycontainer mycontainer

Now my container run with 172.18.1.1 ip inside dockernet network, and with ifconfig I see that my host ip is 172.18.0.1.

After i run these commands:

sysctl -w net.ipv4.conf.dockernet.route_localnet=1
iptables -t nat -A PREROUTING -i dockernet -d 172.18.0.1 -p tcp -- 
dport 3306 -j DNAT --to-destination 127.0.0.1:3306
iptables -t nat -A POSTROUTING -s 172.18.0.0/16 -o lo -p tcp --dport 3306 -j SNAT --to-source 127.0.0.1

Now my container is avaiable to connect to localhost port 3306(mysql), but mysql see that source ip is "172.18.1.1" and not "127.0.0.1"... This means that "-j SNAT --to-source 127.0.0.1" doesn't work...

How can I do to replace source ip "172.18.1.1" with 127.0.0.1 into loopback interface?

P.S. I DON'T WANT USE "docker run --net=host..." AND I DON'T WANT ADD THE FOLLOW USER INTO MYSQL:

CREATE USER 'dockeruser'@'172.18.1.1' IDENTIFIED BY 'password';
GRANT ALL PRIVILEGES ON `mydb`.* TO 'dockeruser'@'172.18.1.1'
FLUSH PRIVILEGES

mysql iptables docker

share|improve this question

edited Apr 7 at 22:15

Davide

31

asked Apr 7 at 14:57

DavideDavide

11

New contributor

Davide is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  POSTROUTING should be named POSTROUTING-OUTGOING, because it normally doesn't catch the packets that go through INPUT and are consumed locally.
  
  – kubanczyk
  Apr 7 at 23:04
  

  
  
  
  

add a comment | 

0

I created a docker network with follow code:

docker network create --subnet=172.18.0.0/16 dockernet

After run a my docker container with:

 docker run -d --net=dockernet --ip 172.18.1.1 --name mycontainer mycontainer

Now my container run with 172.18.1.1 ip inside dockernet network, and with ifconfig I see that my host ip is 172.18.0.1.

After i run these commands:

sysctl -w net.ipv4.conf.dockernet.route_localnet=1
iptables -t nat -A PREROUTING -i dockernet -d 172.18.0.1 -p tcp -- 
dport 3306 -j DNAT --to-destination 127.0.0.1:3306
iptables -t nat -A POSTROUTING -s 172.18.0.0/16 -o lo -p tcp --dport 3306 -j SNAT --to-source 127.0.0.1

Now my container is avaiable to connect to localhost port 3306(mysql), but mysql see that source ip is "172.18.1.1" and not "127.0.0.1"... This means that "-j SNAT --to-source 127.0.0.1" doesn't work...

How can I do to replace source ip "172.18.1.1" with 127.0.0.1 into loopback interface?

P.S. I DON'T WANT USE "docker run --net=host..." AND I DON'T WANT ADD THE FOLLOW USER INTO MYSQL:

CREATE USER 'dockeruser'@'172.18.1.1' IDENTIFIED BY 'password';
GRANT ALL PRIVILEGES ON `mydb`.* TO 'dockeruser'@'172.18.1.1'
FLUSH PRIVILEGES

mysql iptables docker

share|improve this question

edited Apr 7 at 22:15

Davide

31

asked Apr 7 at 14:57

DavideDavide

11

New contributor

Davide is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  POSTROUTING should be named POSTROUTING-OUTGOING, because it normally doesn't catch the packets that go through INPUT and are consumed locally.
  
  – kubanczyk
  Apr 7 at 23:04
  

  
  
  
  

add a comment | 

I created a docker network with follow code:

docker network create --subnet=172.18.0.0/16 dockernet

After run a my docker container with:

 docker run -d --net=dockernet --ip 172.18.1.1 --name mycontainer mycontainer

Now my container run with 172.18.1.1 ip inside dockernet network, and with ifconfig I see that my host ip is 172.18.0.1.

After i run these commands:

sysctl -w net.ipv4.conf.dockernet.route_localnet=1
iptables -t nat -A PREROUTING -i dockernet -d 172.18.0.1 -p tcp -- 
dport 3306 -j DNAT --to-destination 127.0.0.1:3306
iptables -t nat -A POSTROUTING -s 172.18.0.0/16 -o lo -p tcp --dport 3306 -j SNAT --to-source 127.0.0.1

Now my container is avaiable to connect to localhost port 3306(mysql), but mysql see that source ip is "172.18.1.1" and not "127.0.0.1"... This means that "-j SNAT --to-source 127.0.0.1" doesn't work...

How can I do to replace source ip "172.18.1.1" with 127.0.0.1 into loopback interface?

P.S. I DON'T WANT USE "docker run --net=host..." AND I DON'T WANT ADD THE FOLLOW USER INTO MYSQL:

CREATE USER 'dockeruser'@'172.18.1.1' IDENTIFIED BY 'password';
GRANT ALL PRIVILEGES ON `mydb`.* TO 'dockeruser'@'172.18.1.1'
FLUSH PRIVILEGES

mysql iptables docker

share|improve this question

edited Apr 7 at 22:15

Davide

31

asked Apr 7 at 14:57

DavideDavide

11

New contributor

Davide is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

docker network create --subnet=172.18.0.0/16 dockernet

 docker run -d --net=dockernet --ip 172.18.1.1 --name mycontainer mycontainer

sysctl -w net.ipv4.conf.dockernet.route_localnet=1
iptables -t nat -A PREROUTING -i dockernet -d 172.18.0.1 -p tcp -- 
dport 3306 -j DNAT --to-destination 127.0.0.1:3306
iptables -t nat -A POSTROUTING -s 172.18.0.0/16 -o lo -p tcp --dport 3306 -j SNAT --to-source 127.0.0.1

CREATE USER 'dockeruser'@'172.18.1.1' IDENTIFIED BY 'password';
GRANT ALL PRIVILEGES ON `mydb`.* TO 'dockeruser'@'172.18.1.1'
FLUSH PRIVILEGES

share|improve this question

edited Apr 7 at 22:15

Davide

31

asked Apr 7 at 14:57

DavideDavide

11

New contributor

Davide is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

share|improve this question

edited Apr 7 at 22:15

Davide

31

asked Apr 7 at 14:57

DavideDavide

11

New contributor

Davide is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

edited Apr 7 at 22:15

Davide

31

edited Apr 7 at 22:15

Davide

31

asked Apr 7 at 14:57

DavideDavide

11

New contributor

Davide is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

asked Apr 7 at 14:57

DavideDavide

11