Debug the docker container network use nsenter command

1lsof -i

1#find process id in specific container
2docker top `docker ps|grep "istio-proxy_productpage"|cut -d " " -f1`
3# find the pid and use nsenter to container network namespace
4nsenter -n --target PID
5# View the details of the rule configuration in the NAT table.
6iptables -t nat -L -v

1docker run -it --net container:<container_name> nicolaka/netshoot