dockers iptables rules limit upload speed to 500 mbit on I219-LM network adapter
Nobody has claimed this yet.
- Dominant language
- Go
- Stars
- 6.1k
- Forks
- 2.2k
- Avg merge
- 1d 15h
- Merged PRs (30d)
- 43
Description
root@Ubuntu-2004-focal-64-minimal ~ # lspci | egrep -i --color 'network|ethernet'
00:1f.6 Ethernet controller: Intel Corporation Ethernet Connection (2) I219-LM (rev 31)
root@Ubuntu-2004-focal-64-minimal ~ # speedtest
Speedtest by Ookla
Server: Radio Town - Helsinki (id = 43442)
ISP: Hetzner Online GmbH
Latency: 0.33 ms (0.02 ms jitter)
Download: 938.09 Mbps (data used: 423.1 MB)
Upload: 487.48 Mbps (data used: 256.9 MB)
Packet Loss: 0.0%
root@Ubuntu-2004-focal-64-minimal ~ # iptables -S
-P INPUT ACCEPT
-P FORWARD DROP
-P OUTPUT ACCEPT
-N DOCKER
-N DOCKER-ISOLATION-STAGE-1
-N DOCKER-ISOLATION-STAGE-2
-N DOCKER-USER
-A FORWARD -j DOCKER-USER
-A FORWARD -j DOCKER-ISOLATION-STAGE-1
-A FORWARD -o docker0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -o docker0 -j DOCKER
-A FORWARD -i docker0 ! -o docker0 -j ACCEPT
-A FORWARD -i docker0 -o docker0 -j ACCEPT
-A DOCKER-ISOLATION-STAGE-1 -i docker0 ! -o docker0 -j DOCKER-ISOLATION-STAGE-2
-A DOCKER-ISOLATION-STAGE-1 -j RETURN
-A DOCKER-ISOLATION-STAGE-2 -o docker0 -j DROP
-A DOCKER-ISOLATION-STAGE-2 -j RETURN
-A DOCKER-USER -j RETURN
I installed docker using the offical repository:
https://docs.docker.com/engine/install/ubuntu/
Clean minimal installation, just installed docker, no containers.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
No source file or test is named. Start by reproducing the provided speedtest and iptables output on Ubuntu 20.04 with Docker installed and no containers, then trace which Docker networking behavior could affect forwarding; done means the upload limit is explained and the regression is covered by a reproducible test.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- docker, linux, ubuntu
- Domain
- devops, networking
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100