containers / containers/netavark

Broadcast UDP traffic does not reach container via port forwarding

Open
#1,466 4 comments 0 reactions 0 assignees View on GitHub
Dominant language
Rust
Stars
794
Forks
161
Avg merge
8d 17h
Merged PRs (30d)
3

Description

A system on my network broadcasts UDP packets to `10.100.100.255:10600`. I run a container with `-p 10600:10600/udp` intending to receive the traffic.

On Podman with netavark, the traffic is not delivered. The nftables rule includes `type local` so it ignores broadcast or multicast traffic.

```
chain PREROUTING {
type nat hook prerouting priority dstnat; policy accept;
fib daddr type local jump NETAVARK-HOSTPORT-DNAT
}
```

On Docker with `docker run --rm -it -p 10600:10600/udp ubuntu:26.04`, running `socat UDP-LISTEN:10600 -`, the packets do get delivered to the container.

Ubuntu 26.04, netavark 1.16.1-3.1, podman 5.7.0+ds2-3build1

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.