Each of Those people 3 answers have drawbacks, so you might want to thoroughly take into account, if you really need to do this unique forwarding.
Such as if port numbers are modified by NAT on either host, there isn't any approach to reconstruct These. It is also not a offered, that relationship tracking will get the job 토토 done properly, if the main packet it sees is often a SYN-ACK in lieu of an ACK.
4 Take note that if you use --dport within DOCKER-Person this will have to match the internal IP on the container company, not the exposed port. These frequently match but not generally and This may effortlessly conflict with other providers so I even now argue this DOCKER-Person solution is fifty percent-baked.