svlentink/ipfilter repository overview

⁠IpFilter with basic auth (optional) and SSL

Used for getting things online quickly while developing. Less secure than Iptables, but way faster when using docker.

See this⁠ example.

You can use basic auth or filter based on IPv4.

⁠Production

Don't run this on your production env., it is fine for testing. (this type of traffic filtering should be done on your host)

You can use the following⁠:

DOCKER_OPTS="--dns 8.8.8.8 --dns 8.8.4.4 --iptables=false"

⁠alternative

Instead of IP filter, you can expand the barrier from network to device (just like beyondcorp): https://github.com/bitly/oauth2_proxy⁠ https://zero.pritunl.com⁠

Or instead of this layer 4 (application layer), you could use layer 3 filtering.

⁠TLS 1.3

Since Apr. 2019 this container only supports TLS 1.3, this prevents corporate environments to do TLS interception. This will only work in modern browsers like Chrome, not in Edge or IE.