mirror of
https://github.com/vimagick/dockerfiles
synced 2024-06-25 16:28:40 +00:00
22 lines
558 B
Docker
22 lines
558 B
Docker
#
|
|
# Dockerfile for iptables
|
|
#
|
|
|
|
FROM alpine
|
|
MAINTAINER kev <noreply@datageek.info>
|
|
|
|
RUN apk add -U iproute2
|
|
|
|
ENV TCP_PORTS 80,443
|
|
ENV UDP_PORTS 53
|
|
ENV RATE 1mbit
|
|
ENV BURST 1mbit
|
|
ENV LATENCY 50ms
|
|
ENV INTERVAL 60
|
|
|
|
CMD iptables -F \
|
|
&& iptables -A OUTPUT -p tcp -m state --state NEW -m multiport ! --dports $TCP_PORTS -j DROP \
|
|
&& iptables -A OUTPUT -p udp -m state --state NEW -m multiport ! --dports $UDP_PORTS -j DROP \
|
|
&& tc qdisc add dev eth0 root tbf rate $RATE burst $BURST latency $LATENCY \
|
|
&& watch -n $INTERVAL tc -s qdisc ls dev eth0
|