{"action":"opened","issue":{"url":"https://api.github.com/repos/docker/docker/issues/25320","repository_url":"https://api.github.com/repos/docker/docker","labels_url":"https://api.github.com/repos/docker/docker/issues/25320/labels{/name}","comments_url":"https://api.github.com/repos/docker/docker/issues/25320/comments","events_url":"https://api.github.com/repos/docker/docker/issues/25320/events","html_url":"https://github.com/docker/docker/issues/25320","id":168805446,"number":25320,"title":"Can't connect to services","user":{"login":"cgveld","id":1070233,"avatar_url":"https://avatars.githubusercontent.com/u/1070233?v=3","gravatar_id":"","url":"https://api.github.com/users/cgveld","html_url":"https://github.com/cgveld","followers_url":"https://api.github.com/users/cgveld/followers","following_url":"https://api.github.com/users/cgveld/following{/other_user}","gists_url":"https://api.github.com/users/cgveld/gists{/gist_id}","starred_url":"https://api.github.com/users/cgveld/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cgveld/subscriptions","organizations_url":"https://api.github.com/users/cgveld/orgs","repos_url":"https://api.github.com/users/cgveld/repos","events_url":"https://api.github.com/users/cgveld/events{/privacy}","received_events_url":"https://api.github.com/users/cgveld/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/docker/docker/labels/version/1.12","name":"version/1.12","color":"ededed"}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2016-08-02T05:56:12Z","updated_at":"2016-08-02T05:56:13Z","closed_at":null,"body":"**Output of `docker version`:**\r\n```\r\nClient:\r\n Version:      1.12.0\r\n API version:  1.24\r\n Go version:   go1.6.3\r\n Git commit:   8eab29e\r\n Built:        \r\n OS/Arch:      linux/amd64\r\n\r\nServer:\r\n Version:      1.12.0\r\n API version:  1.24\r\n Go version:   go1.6.3\r\n Git commit:   8eab29e\r\n Built:        \r\n OS/Arch:      linux/amd64\r\n```\r\n\r\n**Output of `docker info`:**\r\n```\r\nContainers: 0\r\n Running: 0\r\n Paused: 0\r\n Stopped: 0\r\nImages: 0\r\nServer Version: 1.12.0\r\nStorage Driver: devicemapper\r\n Pool Name: docker-253:0-34404360-pool\r\n Pool Blocksize: 65.54 kB\r\n Base Device Size: 10.74 GB\r\n Backing Filesystem: xfs\r\n Data file: /dev/loop0\r\n Metadata file: /dev/loop1\r\n Data Space Used: 11.8 MB\r\n Data Space Total: 107.4 GB\r\n Data Space Available: 17.81 GB\r\n Metadata Space Used: 581.6 kB\r\n Metadata Space Total: 2.147 GB\r\n Metadata Space Available: 2.147 GB\r\n Thin Pool Minimum Free Space: 10.74 GB\r\n Udev Sync Supported: true\r\n Deferred Removal Enabled: false\r\n Deferred Deletion Enabled: false\r\n Deferred Deleted Device Count: 0\r\n Data loop file: /data/docker/devicemapper/devicemapper/data\r\n WARNING: Usage of loopback devices is strongly discouraged for production use. Use `--storage-opt dm.thinpooldev` to specify a custom block storage device.\r\n Metadata loop file: /data/docker/devicemapper/devicemapper/metadata\r\n Library Version: 1.02.107-RHEL7 (2015-10-14)\r\nLogging Driver: json-file\r\nCgroup Driver: cgroupfs\r\nPlugins:\r\n Volume: local\r\n Network: null host bridge overlay\r\nSwarm: active\r\n NodeID: 8dd2unv6yvtdua17z2nimfw92\r\n Is Manager: true\r\n ClusterID: 4h3iopkqsmwz6jvsuswesop7g\r\n Managers: 2\r\n Nodes: 2\r\n Orchestration:\r\n  Task History Retention Limit: 5\r\n Raft:\r\n  Snapshot interval: 10000\r\n  Heartbeat tick: 1\r\n  Election tick: 3\r\n Dispatcher:\r\n  Heartbeat period: 5 seconds\r\n CA configuration:\r\n  Expiry duration: 3 months\r\n Node Address: 172.16.32.53\r\nRuntimes: runc\r\nDefault Runtime: runc\r\nSecurity Options: seccomp\r\nKernel Version: 3.10.0-327.el7.x86_64\r\nOperating System: CentOS Linux 7 (Core)\r\nOSType: linux\r\nArchitecture: x86_64\r\nCPUs: 1\r\nTotal Memory: 1.797 GiB\r\nName: knbdoc1.pec.vagrant.lan\r\nID: 6OF5:LAG3:YJJ5:2DFT:4RQJ:GZV7:GHXC:S3JV:PZXG:564R:3D2S:LAXA\r\nDocker Root Dir: /data/docker\r\nDebug Mode (client): false\r\nDebug Mode (server): false\r\nNo Proxy: 127.0.0.1,localhost,.is.nl\r\nRegistry: https://index.docker.io/v1/\r\nWARNING: bridge-nf-call-ip6tables is disabled\r\nInsecure Registries:\r\n 127.0.0.0/8\r\n```\r\n\r\n**Additional environment details (AWS, VirtualBox, physical, etc.):**\r\nDocker engine 1.12 swarm running on two Vagrant VirtualBoxes\r\n\r\n**Steps to reproduce the issue:**\r\n1. Start example vote service (docker service create --name vote --replicas=2 -p 80:80 instavote/vote:latest)\r\n2. Connect from local (telnet 172.16.32.53 80) --> OK\r\n3. Connect from remote (telnet 172.16.32.53 80) --> FAIL\r\n\r\n**Describe the results you received:**\r\nWhen connecting to the service from a remote machine, iptables blocks my requests.\r\nAfter adding `iptables -A DOCKER -o docker_gwbridge -p tcp -j ACCEPT` connecting is possible.\r\n\r\n**Describe the results you expected:**\r\nExpected result is a successful connection to the vote app.\r\n\r\n**Additional information you deem important (e.g. issue happens only occasionally):**\r\nIt seems docker fails to add the necessary iptables rules."}}
{"actor":{"display_login":"cgveld"}}