Details

http://windsock.io/the-docker-proxy/

2.https://github.com/docker/docker/issues/14856

3.https://github.com/docker/docker/issues/22741

4.https://docs.docker.com/engine/userguide/networking/default_network/binding/

Solution

Run the Docker daemon as below-dockerd –userland-proxy=falseImpact-Some systems with older Linux kernels may not be able to support hairpin NAT and
therefore require the userland proxy service. Also, some networking setups can be
impacted by the removal of the userland proxy.Default Value-By default, the userland proxy is enabled.

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/517

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Unix.

References

• 800-53|CM-7b.

Source

• Tenable.com/audits