From dcd164aad59645916a68240f56a7563fd84f22fd Mon Sep 17 00:00:00 2001 From: shum Date: Thu, 22 Oct 2026 05:35:45 +0000 Subject: [PATCH] store: note Docker before 27 for IPv6 egress --- apps/simplex-store-service/README.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/apps/simplex-store-service/README.md b/apps/simplex-store-service/README.md index e46d2188d9..b52aa69269 100644 --- a/apps/simplex-store-service/README.md +++ b/apps/simplex-store-service/README.md @@ -374,10 +374,10 @@ On a Docker bridge network instead, `--bridge ` matches traffic from bridge interface in `DOCKER-USER` (traffic forwarded to other hosts) and `INPUT` (the host's own addresses), and needs no `--uid`. The script refuses an interface that is not a bridge or that holds a default route (a bridge carrying the host's uplink, such as `br0` or `vmbr0`, whose inbound connections it would refuse), -and stops -when `DOCKER-USER` is missing (Docker's nftables backend, `"iptables": false` or `"ip6tables": -false` in its daemon config, or Docker not started yet): the forwarded traffic would then pass -unfiltered. The interface is `docker0` for the default network; for another, it is the network's +and stops when `DOCKER-USER` is missing (Docker's nftables backend, `"iptables": false` or +`"ip6tables": false` in its daemon config, or Docker not started yet): the forwarded traffic would +then pass unfiltered. Docker before 27 creates the IPv6 `DOCKER-USER` only with both +`"ip6tables": true` and `"experimental": true`. The interface is `docker0` for the default network; for another, it is the network's `com.docker.network.bridge.name` option when set, else `br-` and the first 12 characters of its id: ```