hello I have trouble networking.
setting:
- Ubuntu 22.04
- Snap package LXD
- Docker version 23.0.1, build a5ee5b1
- network bridge configrated with netplan
I installed docker and then no internet access from container.
I have tried this way then restart lxd. but not worked.
iptables-save (host)
*filter
:INPUT ACCEPT [0:0]
:FORWARD DROP [187:60161]
:OUTPUT ACCEPT [0:0]
:DOCKER - [0:0]
:DOCKER-ISOLATION-STAGE-1 - [0:0]
:DOCKER-ISOLATION-STAGE-2 - [0:0]
:DOCKER-USER - [0:0]
-A FORWARD -j DOCKER-USER
-A FORWARD -j DOCKER-ISOLATION-STAGE-1
-A FORWARD -o docker0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -o docker0 -j DOCKER
-A FORWARD -i docker0 ! -o docker0 -j ACCEPT
-A FORWARD -i docker0 -o docker0 -j ACCEPT
-A FORWARD -o br-b0da2502366a -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -o br-b0da2502366a -j DOCKER
-A FORWARD -i br-b0da2502366a ! -o br-b0da2502366a -j ACCEPT
-A FORWARD -i br-b0da2502366a -o br-b0da2502366a -j ACCEPT
-A DOCKER -d 172.19.0.4/32 ! -i br-b0da2502366a -o br-b0da2502366a -p tcp -m tcp --dport 3000 -j ACCEPT
-A DOCKER-ISOLATION-STAGE-1 -i docker0 ! -o docker0 -j DOCKER-ISOLATION-STAGE-2
-A DOCKER-ISOLATION-STAGE-1 -i br-b0da2502366a ! -o br-b0da2502366a -j DOCKER-ISOLATION-STAGE-2
-A DOCKER-ISOLATION-STAGE-1 -j RETURN
-A DOCKER-ISOLATION-STAGE-2 -o docker0 -j DROP
-A DOCKER-ISOLATION-STAGE-2 -o br-b0da2502366a -j DROP
-A DOCKER-ISOLATION-STAGE-2 -j RETURN
-A DOCKER-USER -o br0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A DOCKER-USER -i br0 -o enp7s0f0 -j ACCEPT
-A DOCKER-USER -j RETURN
COMMIT
# Completed on Tue Feb 14 12:48:14 2023
# Generated by iptables-save v1.8.7 on Tue Feb 14 12:48:14 2023
*nat
:PREROUTING ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
:DOCKER - [0:0]
-A PREROUTING -m addrtype --dst-type LOCAL -j DOCKER
-A OUTPUT ! -d 127.0.0.0/8 -m addrtype --dst-type LOCAL -j DOCKER
-A POSTROUTING -s 172.17.0.0/16 ! -o docker0 -j MASQUERADE
-A POSTROUTING -s 172.19.0.0/16 ! -o br-b0da2502366a -j MASQUERADE
-A POSTROUTING -s 172.19.0.4/32 -d 172.19.0.4/32 -p tcp -m tcp --dport 3000 -j MASQUERADE
-A DOCKER -i docker0 -j RETURN
-A DOCKER -i br-b0da2502366a -j RETURN
-A DOCKER ! -i br-b0da2502366a -p tcp -m tcp --dport 3000 -j DNAT --to-destination 172.19.0.4:3000
COMMIT
# Completed on Tue Feb 14 12:48:14 2023
and this is bridge profile
config: {}
description: ""
devices:
eth0:
name: eth1
nictype: bridged
parent: br0
type: nic
root:
path: /
pool: default
type: disk
name: bridge
used_by:
- /1.0/instances/ldap
What should I do?