docker之动态给容器映射端口

查看容器ip

配置iptables中filter表的FORWARD(DOCKER)链
iptables -A DOCKER ! -i docker0 -o docker0 -p tcp –dport 80 -d 172.18.0.3 -j ACCEPT
配置iptables中nat表的PREROUTING(DOCKER)和POSTROUTING链
iptables -t nat -A POSTROUTING -p tcp –dport 80 -s 172.18.0.3 -d 172.18.0.3 -j MASQUERADE
iptables -t nat -A DOCKER ! -i dokcer0 -p tcp –dport 8080 -j DNAT –to-destination 172.18.0.3:80

查看映射结果 iptables -nvxL