Révision 67cdcf15
Support input interface specification to dns server
Useful when you want to allow docker/podman containers
access to a hosts dns stub resolver.
```puppet
class{'nftables::rules::dns':
iifname => ['docker0'],
}
```
| REFERENCE.md | ||
|---|---|---|
| 526 | 526 |
|
| 527 | 527 |
manage in dns |
| 528 | 528 |
|
| 529 |
#### Examples |
|
| 530 |
|
|
| 531 |
##### Allow access to stub dns resolver from docker containers |
|
| 532 |
|
|
| 533 |
```puppet |
|
| 534 |
class { 'nftables::rules::dns':
|
|
| 535 |
iifname => ['docker0'], |
|
| 536 |
} |
|
| 537 |
``` |
|
| 538 |
|
|
| 529 | 539 |
#### Parameters |
| 530 | 540 |
|
| 531 | 541 |
The following parameters are available in the `nftables::rules::dns` class: |
| 532 | 542 |
|
| 533 | 543 |
* [`ports`](#-nftables--rules--dns--ports) |
| 544 |
* [`iifname`](#-nftables--rules--dns--iifname) |
|
| 534 | 545 |
|
| 535 | 546 |
##### <a name="-nftables--rules--dns--ports"></a>`ports` |
| 536 | 547 |
|
| ... | ... | |
| 540 | 551 |
|
| 541 | 552 |
Default value: `[53]` |
| 542 | 553 |
|
| 554 |
##### <a name="-nftables--rules--dns--iifname"></a>`iifname` |
|
| 555 |
|
|
| 556 |
Data type: `Optional[Array[String[1],1]]` |
|
| 557 |
|
|
| 558 |
Specify input interface names. |
|
| 559 |
|
|
| 560 |
Default value: `undef` |
|
| 561 |
|
|
| 543 | 562 |
### <a name="nftables--rules--docker_ce"></a>`nftables::rules::docker_ce` |
| 544 | 563 |
|
| 545 | 564 |
The configuration distributed in this class represents the default firewall |
Formats disponibles : Unified diff