This project added iptables rules to restrict access to private ip.
1.1K
This project is used to enhance the shadowsocks/shadowsocks-libev.
Because shadowsocks/shadowsocks-libev does not restrict local area network access, this can cause security problems.
This project added iptables rules to restrict access to private ip.
$ docker run -d --privileged -p <PORT>:<DOCKER-PORT> -p <PORT>:<DOCKER-PORT>/udp -e PASSWORD="<PASSWORD>" awei/shadowsocks-libev-with-local-security
e.g.
$ docker run -d --privileged -p 8388:8388 -p 8388:8388/udp -e PASSWORD="P@ssw0rd" awei/shadowsocks-libev-with-local-security
deploy to kubernetes example:
kind: Service
apiVersion: v1
metadata:
name: service-shadowsocks
spec:
selector:
app: shadowsocks-1
ports:
- name: tcp
protocol: TCP
port: 8388
targetPort: 8388
nodePort: 30000
- name: udp
protocol: UDP
port: 8388
targetPort: 8388
nodePort: 30000
type: NodePort
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: deployment-shadowsocks-1
labels:
app: shadowsocks-1
spec:
replicas: 1
selector:
matchLabels:
app: shadowsocks-1
template:
metadata:
labels:
app: shadowsocks-1
spec:
containers:
- name: pod-shadowsocks
image: awei/shadowsocks-libev-with-local-security:latest
env:
- name: PASSWORD
value: "P@ssw0rd"
- name: METHOD
value: "aes-256-gcm"
ports:
- containerPort: 8388
securityContext:
privileged: true
PASSWORD Set a passwordSERVER_ADDR Server listen ip (default: 0.0.0.0)SERVER_PORT Server listen port (default: 8388)METHOD Encryption type (default: aes-256-gcm)TIMEOUT Timeout (unit:second) (default: 300)DNS_ADDRS DNS Servers (default: 8.8.8.8,8.8.4.4)ARGS other argssee shadowsocks/shadowsocks-libev dockerfile
The repository is open-sourced software licensed under the MIT license.
Content type
Image
Digest
sha256:63ac94eda…
Size
10.4 MB
Last updated
almost 4 years ago
docker pull awei/shadowsocks-libev-with-local-security