教程

docker linux nginx security networking self-hosting web-server reverse-proxy vps debian ubuntu firewall virtual-hosts bgp rpki bird2 frrouting vyos anycast ssh fail2ban n8n docker-compose postgresql workflow-automation ssl tls lets-encrypt certbot https tmux terminal vps-administration claude-code ai-tools ripe-ncc ufw iptables gnu-screen terminal-multiplexer screen-session webhooks self-hosted proxy-pass websocket ollama ai-agents mcp sshd-config ed25519 rootless-docker seccomp apparmor containers openclaw hermes-agent routing ipv6 systemd frr typescript nodejs roa routinator ai-agent telegram vim text-editor server-administration aiops observability monitoring signoz grafana langfuse prometheus ip-transit production logging disk-management openobserve opentelemetry datadog-alternative gdpr nftables loki promtail logql claude ai-workflows langchain backup mysql s3 rclone cron python log-analysis discord slack disaster-recovery traefik caddy wireguard tailscale vpn headscale alertmanager self-healing performance zero-downtime github-actions ai-code-review gemini ci-cd rate-limiting ddos-protection bind9 dns high-availability privacy vaultwarden password-manager bgpalerter plakar encryption deduplication immich photo-management google-photos-alternative replication offsite-backup paperless-ngx document-management ocr gitea git plausible analytics clickhouse uptime-kuma beszel hardening failover multihoming bfd llm-observability deepeval windows-server veeam migration bare-metal-restore virtio p2v

docker ufw iptables

修复Docker绕过UFW防火墙：4种经过测试的VPS解决方案

Docker直接操作iptables并忽略UFW规则。即使启用了ufw deny，你的容器端口仍然暴露在互联网上。这里提供四种解决方案及其权衡，每种都通过外部主机扫描验证。

2 分钟阅读阅读 →