systemctl stop firewalld

vim /etc/docker/daemon.json

{

...

"experimental" : true,

"iptables": false

}

systemctl daemon-reload

systemctl restart docker

systemctl restart firewalld

systemctl restart docker

# 开启转发,docker要注意

firewall-cmd --add-masquerade --permanent

# 查看转发情况，结果是yes了

firewall-cmd --query-masquerade