docker 容器内不能上网

容器不能联网

使用docker默认的桥接模式(bridge)无法对外访问网络,主要是转发NAT FWD导致的

测试是否可以上网

docker run --rm alpine ping -c 3 www.baidu.com

2025-04-20T02:28:36.png

或者先重启防火墙 /etc/init.d/firewall restart

然后 docker run --rm alpine ping -c 3 www.baidu.com

linux

sysctl net.ipv4.ip_forward
查看转发情况,正常应该是 1

sysctl -w net.ipv4.ip_forward=1
sysctl -p

openwrt

单网口的这样配置,直接改 lan为dhcp客户端,关闭dhcp server

config device
        option name 'br-lan'
        option type 'bridge'
        list ports 'eth0'

config interface 'lan'
        option device 'br-lan'
        option proto 'dhcp'

2024-11-04T02:59:03.png

docker里面配置,在wan口允许访问:

2024-11-09T10:43:12.png

如果没有上述设置,那么改这里

2024-11-09T10:43:12.png

LEDE QWRT需配置防火墙

config nat 'docker_nat'
        option name 'DockerNAT'
        option proto 'all'
        option src 'lan'
        option target 'MASQUERADE'
        option extra '-i docker0'

config zone 'docker'
        option name 'docker'
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'ACCEPT'
        option auto_helper '0'
        list device 'docker0'

config forwarding 'docker_to_wan'
        option src 'docker'
        option dest 'wan'

config forwarding 'docker_to_lan'
        option src 'docker'
        option dest 'lan'

config forwarding 'lan_to_docker'
        option src 'lan'
        option dest 'docker'