Lock down network access to internet only

Docker Engine Compose
1

Hi all,

I’m currently trying to isolate a (3rd party) docker container, so that it ONLY has access to the internet.

i.e. It should NOT be able to

  • access/discover other docker containers
  • access/discover the host machine
  • access/discover other machines on the host’s network (other than the gateway)

It should ONLY be able to access the internet (gateway).

Is there a way to do this using only docker network configuration options?

I was thinking I could run a custom gateway container, which locks down access, but wanted to avoid that if there was a native (-> configuration) solution.

Notes:

  • I cannot modify the docker container e.g. add iptables into the container itself