Hello @Unify,

prior to starting Docker on our Debian 10-based OS Images, you have to update alternative for iptables e.g.:

update-alternatives --set iptables /usr/sbin/iptables-legacy update-alternatives --set ip6tables /usr/sbin/ip6tables-legacy

As an alternative solution, you can compile the appropriate module from the source by yourself.

The reason is that the current Linux kernel does not contain full nftables support. The next released OS Image generation (Debian 11) will have it by default.