What methods can be used to restrict access to the port that a container listens to?

Access to the port listened to by the container can be restricted in the following ways:

1. Firewall configuration on the host — using iptables or firewalld to allow access to the port only from specific IP addresses or subnets.

2. Using Kubernetes Network Policies — if the container is running in Kubernetes, you can restrict access to the service by setting rules about which pods or external sources can connect.

3. Port forwarding only to localhost — when launching the container, you can forward the port only to the local interface, so access is only possible from the host.

4. Using a proxy or reverse proxy — for example, configuring nginx or another proxy server to filter connections.

5. Configuring container parameters — for example, running the container with network restrictions (network mode) so that it is isolated from external networks.

Example of port forwarding only to localhost in Docker:

docker run -p 127.0.0.1:8080:80 mycontainer

This will allow connections to port 8080 only from the local machine.