Re: Semi-OT: Tips for docker build/deployment with Perl env

[hippo]

While I don't use Docker at all, I do manage some network security and so my one OT tip is to make absolutely sure that you have firewalled off the default Docker ports (TCP 2375, 2376 and 2377). We see so much distributed inbound traffic to these ports that any unprotected Docker instance will surely be pwned in short order.

[Your Mother]

Great tip. ++

I’ve told this story before but it bears repeating. It was back in like… 2001? 2003? Somewhere in there. For the first time ever I opened up my home dev webserver to the Internet as an experiment to see if I wanted to host my own sites. I happened to be watching the logs and it was something like… 15 minutes before attacks/probes started to trickle and soon pour in. Big eye-opener for me.