Each individual of All those 3 answers have drawbacks, so you might want to cautiously take into account, if you actually need To do that particular forwarding.
One example is if port numbers are modified by NAT on both host, there is not any approach to reconstruct All those. It is also not a presented, that relationship tracking will perform the right way, if the very first packet it sees can be a SYN-ACK rather then an ACK.
4 Notice that if you utilize --dport inside of DOCKER-USER this need to match The inner IP of your container services, not the exposed port. These generally match although not always and this could simply conflict with other expert services so I 카지노솔루션 nonetheless argue that this DOCKER-Consumer Answer is 50 percent-baked.