Port forwarding verso un Docker container

pf

Scenario: OSX, un servizio in ascolto su di un container docker

    Avviare il container docker esponendo le porte

    $ docker run -d -P memcached

    Abilitare il packet forwarding

    $ sysctl -w net.inet.ip.forwarding=1

    Configurare pf (es. pf.conf)

    EXT_IF="en3"
    INT_IF="vboxnet1"
    EXP_IP = maggi.client.rete.loc
    EXT_PORT = 11211
    DOCKER_IP = 192.168.59.103
    DOCKER_PORT = 49153
    rdr pass on $EXT_IF inet proto { tcp, udp } from any to $EXT_IP port $EXT_PORT -> $DOCKER_IP port $DOCKER_PORT
    nat on $INT_IF from any to $DOCKER_IP -> ($INT_IF)

    Abilitare caricare le regole in pf

    $ pfctl -v -f pf.conf