DOCKER-USER chain for ip6tables

[rimelek (Ákos Takács)]

I have read your question 3 days ago and it was clear to me, but don’t use IPv6 for containers so I was waiting for someone who uses IPv6. Now I checked the documentation and also searched for “ipv6 iptables docker” and I found that ipv6 iptables rules are not enabled by default and that is still an experimental feature.

dockerd

--iptables          Enable addition of iptables rules (default true)
--ip6tables         Enable addition of ip6tables rules (default false)

When you enable ip6tables you also need

--experimental      Enable experimental features

Or in the daemon json

{
    "experimental": true,
    "ipv6": true,
    "ip6tables": true,
    "fixed-cidr-v6": "fd9e:63ac:6dcd::/48"
}

My first source where I found this json before checking the docs:

Docker uses 'iptables' instead of 'ip6tables' for IPv6 NAT rule, crashes