What causes SafeLine WAF ports to fail in rootless Docker?

Rootlesskit namespace traps nginx; no host exposure. Fix: slirp4netns + explicit ports.

How to preserve real client IPs in rootless Docker WAF?

Switch port driver to slirp4netns—SNAT gone, IPs true.

⚙️ DevOps & Platform Eng

Rootless Docker dreams crash into WAF reality. SafeLine runs—barely—but only after sysctl hacks and config tweaks.

theAIcatchup Apr 09, 2026 3 min read

Published by

Ship faster. Build smarter.

#Docker security #Rootless Docker #SafeLine WAF #Web Application Firewall #slirp4netns

Get the best Developer Tools stories of the week in your inbox — no noise, no spam.

Originally reported by dev.to