Otdfbt

Do Phineas and Ferb ever actually get busted in real time?

Motorized valve interfering with button?

TGV timetables / schedules?

How is it possible to have an ability score that is less than 3?

Accidentally leaked the solution to an assignment, what to do now? (I'm the prof)

When blogging recipes, how can I support both readers who want the narrative/journey and ones who want the printer-friendly recipe?

What is the offset in a seaplane's hull?

"which" command doesn't work / path of Safari?

Why can't I see bouncing of a switch on an oscilloscope?

Find original functions from a composite function

How to add power-LED to my small amplifier?

I probably found a bug with the sudo apt install function

Is there a familial term for apples and pears?

How did the USSR manage to innovate in an environment characterized by government censorship and high bureaucracy?

The magic money tree problem

How to report a triplet of septets in NMR tabulation?

What do you call something that goes against the spirit of the law, but is legal when interpreting the law to the letter?

Awk syntax, strange variable?

Can I interfere when another PC is about to be attacked?

Why is the design of haulage companies so “special”?

Infinite past with a beginning?

Shell script can be run only with sh command

How old can references or sources in a thesis be?

What is the command to reset a PC without deleting any files

iptables rules for dockerized prometheus stack and swarm

iptables rules to block ssh remote forwarded portsiptables: IP alias and port forwardingiptables port forwardingiptables questionA minmal iptables ruleset for a high volume Nginx reverse proxy (or: how to use NOTRACK for http and https)?RHEL 6 Having issues forwarding port 80 to port 8080Configuring iptables on dd-wrt routeriptables port forwarding to server with different portCentos 7 , Master-slave replication iptables?Allowing outgoing connections from Docker Swarm Mode containers with iptables

.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;

1

OS: ubuntu
Everything runns in containers (run via docker stack deploy)
2 servers running separate swarm

1. server - running grafana + prometheus (ip 1.1.1.1)


2. server - running node_exporter + cadvisor (ip 2.2.2.2)

Need to setup IPTABLES:

On 1st server:

iptables -I FORWARD -p tcp --dport 9100 -j DROP
iptables -I FORWARD -s 2.2.2.2. -p tcp --dport 9100 -j ACCEPT 

(9100 is node_exporter port)

When node_exporter iptables are setup as above everything looks just ok and I am happy. So I want to setup the same for cadvisor.

iptables -I FORWARD -p tcp --dport 8080 -j DROP
iptables -I FORWARD -s 2.2.2.2. -p tcp --dport 8080 -j ACCEPT 

(8080 is cadvisor port)

When its setup iptables for cadvisor as posted above it does not work.

When I set it up again as:

iptables -I FORWARD -p tcp --dport 8080 -j ACCEPT 

everything works fine - but I do not want the port to be exposed to the world.

Please help

iptables docker port prometheus

share|improve this question

edited 2 days ago

Leo

1,410415

asked Apr 4 at 9:34

Palino1611Palino1611

62

New contributor

Palino1611 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

add a comment | 

1

OS: ubuntu
Everything runns in containers (run via docker stack deploy)
2 servers running separate swarm

1. server - running grafana + prometheus (ip 1.1.1.1)


2. server - running node_exporter + cadvisor (ip 2.2.2.2)

Need to setup IPTABLES:

On 1st server:

iptables -I FORWARD -p tcp --dport 9100 -j DROP
iptables -I FORWARD -s 2.2.2.2. -p tcp --dport 9100 -j ACCEPT 

(9100 is node_exporter port)

When node_exporter iptables are setup as above everything looks just ok and I am happy. So I want to setup the same for cadvisor.

iptables -I FORWARD -p tcp --dport 8080 -j DROP
iptables -I FORWARD -s 2.2.2.2. -p tcp --dport 8080 -j ACCEPT 

(8080 is cadvisor port)

When its setup iptables for cadvisor as posted above it does not work.

When I set it up again as:

iptables -I FORWARD -p tcp --dport 8080 -j ACCEPT 

everything works fine - but I do not want the port to be exposed to the world.

Please help

iptables docker port prometheus

share|improve this question

edited 2 days ago

Leo

1,410415

asked Apr 4 at 9:34

Palino1611Palino1611

62

New contributor

Palino1611 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

add a comment | 

OS: ubuntu
Everything runns in containers (run via docker stack deploy)
2 servers running separate swarm

1. server - running grafana + prometheus (ip 1.1.1.1)


2. server - running node_exporter + cadvisor (ip 2.2.2.2)

Need to setup IPTABLES:

On 1st server:

iptables -I FORWARD -p tcp --dport 9100 -j DROP
iptables -I FORWARD -s 2.2.2.2. -p tcp --dport 9100 -j ACCEPT 

(9100 is node_exporter port)

When node_exporter iptables are setup as above everything looks just ok and I am happy. So I want to setup the same for cadvisor.

iptables -I FORWARD -p tcp --dport 8080 -j DROP
iptables -I FORWARD -s 2.2.2.2. -p tcp --dport 8080 -j ACCEPT 

(8080 is cadvisor port)

When its setup iptables for cadvisor as posted above it does not work.

When I set it up again as:

iptables -I FORWARD -p tcp --dport 8080 -j ACCEPT 

everything works fine - but I do not want the port to be exposed to the world.

Please help

iptables docker port prometheus

share|improve this question

edited 2 days ago

Leo

1,410415

asked Apr 4 at 9:34

Palino1611Palino1611

62

New contributor

Palino1611 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

iptables -I FORWARD -p tcp --dport 9100 -j DROP
iptables -I FORWARD -s 2.2.2.2. -p tcp --dport 9100 -j ACCEPT 

iptables -I FORWARD -p tcp --dport 8080 -j DROP
iptables -I FORWARD -s 2.2.2.2. -p tcp --dport 8080 -j ACCEPT 

iptables -I FORWARD -p tcp --dport 8080 -j ACCEPT 

share|improve this question

edited 2 days ago

Leo

1,410415

asked Apr 4 at 9:34

Palino1611Palino1611

62

New contributor

Palino1611 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

share|improve this question

edited 2 days ago

Leo

1,410415

asked Apr 4 at 9:34

Palino1611Palino1611

62

New contributor

Palino1611 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

edited 2 days ago

Leo

1,410415

edited 2 days ago

Leo

1,410415

asked Apr 4 at 9:34

Palino1611Palino1611

62

New contributor

Palino1611 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

asked Apr 4 at 9:34

Palino1611Palino1611

62