查看docker接口,一般為docker0
$ route
添加接口信任
sudo firewall-cmd --permanent --zone=trusted --add-interface=docker0
sudo firewall-cmd --reload
# 添加允許ip地址偽裝
sudo firewall-cmd --add-masquerade --permanent
sudo firewall-cmd --reload
# 開啟端口轉發功能
修改/etc/sysctl.conf的net.ipv4.ip_forwar為1:
# 如沒有字段:
echo 'net.ipv4.ip_forward = 1' >> /etc/sysctl.conf
# 如有字段:
sed -i 's#net.ipv4.ip_forward = 0#net.ipv4.ip_forward = 1#g' /etc/sysctl.conf
# 然后使得配置生效:
sysctl -p
# 檢查
cat /proc/sys/net/ipv4/ip_forward # 返回1則成功