How do I restrict cAdvisor to the internal network?

stefanprodan / dockprom

Docker hosts and containers monitoring with Prometheus, Grafana, cAdvisor, NodeExporter and AlertManager

MIT License

6.02k stars 1.72k forks source link

How do I restrict cAdvisor to the internal network? #306

Open hack3rcon opened 4 months ago

hack3rcon commented 4 months ago

Hello, I installed cAdvisor on a web server, but I want only one specific IP address to be able to connect to port 8080. For this, I used the following iptables:

-A FILTERS -m state --state NEW -s 172.20.2.1/16 -m tcp -p tcp --dport 8080 -j ACCEPT

But it doesn't work. Why?

Thank you.