Socket Proxy is a security-enhanced proxy which allows you to apply access rules to the Docker socket, limiting the attack surface for containers that need to use it.

Giving access to the Docker socket could mean giving root access to the host, or even to your whole swarm, but some services require hooking into that socket to react to events, etc.

• Using this proxy lets you block anything you consider those services should not do.

Docker Compose

https://github.com/linuxserver/docker-socket-proxy

https://github.com/Tecnativa/docker-socket-proxy