alioth/nixpkgs
3
0
Fork 0
forked from mirrors/nixpkgs
Code Releases Activity

nftables: adds information regarding nftables and Docker (#24326)

Browse source
This commit is contained in:
Richard Zetterberg 2017-03-25 16:34:02 +01:00 committed by Robin Gloster
parent f087b75941
commit dc10688edb
1 changed files with 11 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
nixos/modules/services/networking/nftables.nix
View file

@ -17,6 +17,17 @@ in
This conflicts with the standard networking firewall, so make sure to This conflicts with the standard networking firewall, so make sure to
disable it before using nftables. disable it before using nftables.
Note that if you have Docker enabled you will not be able to use
nftables without intervention. Docker uses iptables internally to
setup NAT for containers. This module disables the ip_tables kernel
module, however Docker automatically loads the module. Please see [1]
for more information.
There are other programs that use iptables internally too, such as
libvirt.
[1]: https://github.com/NixOS/nixpkgs/issues/24318#issuecomment-289216273
''; '';
}; };
networking.nftables.ruleset = mkOption { networking.nftables.ruleset = mkOption {