Docker 網(wǎng)絡(luò)模式(四種)詳細(xì)介紹
Docker 網(wǎng)絡(luò)模式
本文首先介紹了Docker自身的4種網(wǎng)絡(luò)工作方式,
Docker作為目前最火的輕量級(jí)容器技術(shù),有很多令人稱道的功能,如Docker的鏡像管理。然而,Docker同樣有著很多不完善的地方,網(wǎng)絡(luò)方面就是Docker比較薄弱的部分。因此,我們有必要深入了解Docker的網(wǎng)絡(luò)知識(shí),以滿足更高的網(wǎng)絡(luò)需求。
四種網(wǎng)絡(luò)模式
我們?cè)谑褂胐ocker run創(chuàng)建Docker容器時(shí),可以用--net選項(xiàng)指定容器的網(wǎng)絡(luò)模式,Docker有以下4種網(wǎng)絡(luò)模式:
· host模式,使用--net=host指定。
· container模式,使用--net=container:NAME_or_ID指定。
· none模式,使用--net=none指定。
· bridge模式,使用--net=bridge指定,默認(rèn)設(shè)置。
1 host模式
眾所周知,Docker使用了Linux的Namespaces技術(shù)來(lái)進(jìn)行資源隔離,如PID Namespace隔離進(jìn)程,Mount Namespace隔離文件系統(tǒng),Network Namespace隔離網(wǎng)絡(luò)等。一個(gè)Network Namespace提供了一份獨(dú)立的網(wǎng)絡(luò)環(huán)境,包括網(wǎng)卡、路由、Iptable規(guī)則等都與其他的Network Namespace隔離。一個(gè)Docker容器一般會(huì)分配一個(gè)獨(dú)立的Network Namespace。但如果啟動(dòng)容器的時(shí)候使用host模式,那么這個(gè)容器將不會(huì)獲得一個(gè)獨(dú)立的Network Namespace,而是和宿主機(jī)共用一個(gè)Network Namespace。容器將不會(huì)虛擬出自己的網(wǎng)卡,配置自己的IP等,而是使用宿主機(jī)的IP和端口。
例如,我們?cè)?0.10.101.105/24的機(jī)器上用host模式啟動(dòng)一個(gè)含有web應(yīng)用的Docker容器,監(jiān)聽(tīng)tcp80端口。當(dāng)我們?cè)谌萜髦袌?zhí)行任何類似ifconfig命令查看網(wǎng)絡(luò)環(huán)境時(shí),看到的都是宿主機(jī)上的信息。而外界訪問(wèn)容器中的應(yīng)用,則直接使用10.10.101.105:80即可,不用任何NAT轉(zhuǎn)換,就如直接跑在宿主機(jī)中一樣。但是,容器的其他方面,如文件系統(tǒng)、進(jìn)程列表等還是和宿主機(jī)隔離的。
2 container模式
在理解了host模式后,這個(gè)模式也就好理解了。這個(gè)模式指定新創(chuàng)建的容器和已經(jīng)存在的一個(gè)容器共享一個(gè)Network Namespace,而不是和宿主機(jī)共享。新創(chuàng)建的容器不會(huì)創(chuàng)建自己的網(wǎng)卡,配置自己的IP,而是和一個(gè)指定的容器共享IP、端口范圍等。同樣,兩個(gè)容器除了網(wǎng)絡(luò)方面,其他的如文件系統(tǒng)、進(jìn)程列表等還是隔離的。兩個(gè)容器的進(jìn)程可以通過(guò)lo網(wǎng)卡設(shè)備通信。
3 none模式
這個(gè)模式和前兩個(gè)不同。在這種模式下,Docker容器擁有自己的Network Namespace,但是,并不為Docker容器進(jìn)行任何網(wǎng)絡(luò)配置。也就是說(shuō),這個(gè)Docker容器沒(méi)有網(wǎng)卡、IP、路由等信息。需要我們自己為Docker容器添加網(wǎng)卡、配置IP等。
4 bridge模式
bridge模式是Docker默認(rèn)的網(wǎng)絡(luò)設(shè)置,此模式會(huì)為每一個(gè)容器分配Network Namespace、設(shè)置IP等,并將一個(gè)主機(jī)上的Docker容器連接到一個(gè)虛擬網(wǎng)橋上。下面著重介紹一下此模式。
host模式
使用Docker run時(shí)使用–net=host指定
Docker使用的網(wǎng)絡(luò)實(shí)際上和宿主機(jī)一樣,在容器內(nèi)看到的網(wǎng)卡ip是宿主機(jī)上的ip。
[root@localhost ~]# docker run -it --rm --net=host centos_with_net bash
–rm,退出鏡像時(shí)同時(shí)刪除該鏡像
[root@localhost /]# ifconfig docker0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet 172.17.42.1 netmask 255.255.0.0 broadcast 0.0.0.0 inet6 fe80::8cfc:c7ff:fe49:f1ae prefixlen 64 scopeid 0x20<link> ether 4e:90:a4:b6:91:91 txqueuelen 0 (Ethernet) RX packets 58 bytes 3820 (3.7 KiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 6 bytes 468 (468.0 B) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet 192.168.1.179 netmask 255.255.255.0 broadcast 192.168.1.255 inet6 fe80::20c:29ff:fedb:b228 prefixlen 64 scopeid 0x20<link> ether 00:0c:29:db:b2:28 txqueuelen 1000 (Ethernet) RX packets 10562 bytes 868003 (847.6 KiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 2985 bytes 390673 (381.5 KiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536 inet 127.0.0.1 netmask 255.0.0.0 inet6 ::1 prefixlen 128 scopeid 0x10<host> loop txqueuelen 0 (Local Loopback) RX packets 16 bytes 960 (960.0 B) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 16 bytes 960 (960.0 B) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 veth5446780: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet6 fe80::c0f4:f5ff:fe71:f3bd prefixlen 64 scopeid 0x20<link> ether c2:f4:f5:71:f3:bd txqueuelen 0 (Ethernet) RX packets 7 bytes 558 (558.0 B) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 49 bytes 3894 (3.8 KiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 veth111b1ca: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet6 fe80::4c90:a4ff:feb6:9191 prefixlen 64 scopeid 0x20<link> ether 4e:90:a4:b6:91:91 txqueuelen 0 (Ethernet) RX packets 7 bytes 558 (558.0 B) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 13 bytes 1026 (1.0 KiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 veth55dbbb2: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet6 fe80::c84d:9ff:fecd:da27 prefixlen 64 scopeid 0x20<link> ether ca:4d:09:cd:da:27 txqueuelen 0 (Ethernet) RX packets 7 bytes 558 (558.0 B) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 42 bytes 3336 (3.2 KiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 veth5e2dff4: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet6 fe80::9465:1bff:fed2:f75d prefixlen 64 scopeid 0x20<link> ether 96:65:1b:d2:f7:5d txqueuelen 0 (Ethernet) RX packets 7 bytes 558 (558.0 B) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 20 bytes 1584 (1.5 KiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 veth628d605: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet6 fe80::5cc8:ebff:fedb:ea69 prefixlen 64 scopeid 0x20<link> ether 5e:c8:eb:db:ea:69 txqueuelen 0 (Ethernet) RX packets 7 bytes 558 (558.0 B) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 6 bytes 468 (468.0 B) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 veth991629e: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet6 fe80::b464:e5ff:fed5:1bd6 prefixlen 64 scopeid 0x20<link> ether b6:64:e5:d5:1b:d6 txqueuelen 0 (Ethernet) RX packets 7 bytes 558 (558.0 B) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 27 bytes 2142 (2.0 KiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 vethb086b1c: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet6 fe80::dcdf:66ff:fed8:f2df prefixlen 64 scopeid 0x20<link> ether de:df:66:d8:f2:df txqueuelen 0 (Ethernet) RX packets 8 bytes 636 (636.0 B) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 34 bytes 2700 (2.6 KiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 [root@localhost /]# exit exit
與宿主機(jī)的IP信息對(duì)比
[root@localhost ~]# ifconfig docker0 Link encap:Ethernet HWaddr 4E:90:A4:B6:91:91 inet addr:172.17.42.1 Bcast:0.0.0.0 Mask:255.255.0.0 inet6 addr: fe80::8cfc:c7ff:fe49:f1ae/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:58 errors:0 dropped:0 overruns:0 frame:0 TX packets:6 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:3820 (3.7 KiB) TX bytes:468 (468.0 b) eth0 Link encap:Ethernet HWaddr 00:0C:29:DB:B2:28 inet addr:192.168.1.179 Bcast:192.168.1.255 Mask:255.255.255.0 inet6 addr: fe80::20c:29ff:fedb:b228/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:10661 errors:0 dropped:0 overruns:0 frame:0 TX packets:3012 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:876797 (856.2 KiB) TX bytes:398049 (388.7 KiB) lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 inet6 addr: ::1/128 Scope:Host UP LOOPBACK RUNNING MTU:65536 Metric:1 RX packets:16 errors:0 dropped:0 overruns:0 frame:0 TX packets:16 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:960 (960.0 b) TX bytes:960 (960.0 b) veth5e2dff4 Link encap:Ethernet HWaddr 96:65:1B:D2:F7:5D inet6 addr: fe80::9465:1bff:fed2:f75d/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:7 errors:0 dropped:0 overruns:0 frame:0 TX packets:20 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:558 (558.0 b) TX bytes:1584 (1.5 KiB) vethb086b1c Link encap:Ethernet HWaddr DE:DF:66:D8:F2:DF inet6 addr: fe80::dcdf:66ff:fed8:f2df/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:8 errors:0 dropped:0 overruns:0 frame:0 TX packets:34 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:636 (636.0 b) TX bytes:2700 (2.6 KiB) veth55dbbb2 Link encap:Ethernet HWaddr CA:4D:09:CD:DA:27 inet6 addr: fe80::c84d:9ff:fecd:da27/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:7 errors:0 dropped:0 overruns:0 frame:0 TX packets:42 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:558 (558.0 b) TX bytes:3336 (3.2 KiB) veth111b1ca Link encap:Ethernet HWaddr 4E:90:A4:B6:91:91 inet6 addr: fe80::4c90:a4ff:feb6:9191/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:7 errors:0 dropped:0 overruns:0 frame:0 TX packets:13 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:558 (558.0 b) TX bytes:1026 (1.0 KiB) veth628d605 Link encap:Ethernet HWaddr 5E:C8:EB:DB:EA:69 inet6 addr: fe80::5cc8:ebff:fedb:ea69/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:7 errors:0 dropped:0 overruns:0 frame:0 TX packets:6 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:558 (558.0 b) TX bytes:468 (468.0 b) veth991629e Link encap:Ethernet HWaddr B6:64:E5:D5:1B:D6 inet6 addr: fe80::b464:e5ff:fed5:1bd6/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:7 errors:0 dropped:0 overruns:0 frame:0 TX packets:27 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:558 (558.0 b) TX bytes:2142 (2.0 KiB) veth5446780 Link encap:Ethernet HWaddr C2:F4:F5:71:F3:BD inet6 addr: fe80::c0f4:f5ff:fe71:f3bd/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:7 errors:0 dropped:0 overruns:0 frame:0 TX packets:49 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:558 (558.0 b) TX bytes:3894 (3.8 KiB)
container模式
使用–net=Container:container_id/container_name,多個(gè)容器使用共同的網(wǎng)絡(luò)看到的ip是一樣的。
[root@localhost ~]# docker ps CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES 7169e8be6d3e centos "/bin/bash" About an hour ago Up About an hour serene_goldstine 4cd696928bbe centos "bash" About an hour ago Up About an hour cent_testv2 4f5bf6f33f2c centos "bash" About an hour ago Up About an hour gloomy_colden 0a80861145c9 centos "bash" About an hour ago Up About an hour mad_carson fb45150dbc21 centos "bash" About an hour ago Up About an hour cent_testv 3222c7c5c456 centos "bash" 2 hours ago Up 2 hours sick_albattani e136b27a8e17 centos "bash" 2 hours ago Up 2 hours tender_euclid [root@localhost ~]# docker exec -it 7169 bash [root@7169e8be6d3e /]# ifconfig bash: ifconfig: command not found [root@7169e8be6d3e /]# yum install -y net-tools ifconfig [root@7169e8be6d3e /]# ifconfig eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet 172.17.0.8 netmask 255.255.0.0 broadcast 0.0.0.0 inet6 fe80::42:acff:fe11:8 prefixlen 64 scopeid 0x20<link> ether 02:42:ac:11:00:08 txqueuelen 0 (Ethernet) RX packets 5938 bytes 15420209 (14.7 MiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 4841 bytes 329652 (321.9 KiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536 inet 127.0.0.1 netmask 255.0.0.0 inet6 ::1 prefixlen 128 scopeid 0x10<host> loop txqueuelen 0 (Local Loopback) RX packets 0 bytes 0 (0.0 B) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 0 bytes 0 (0.0 B) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 [root@7169e8be6d3e /]# exit exit [root@localhost ~]# docker run -it --rm --net=container:7169 centos_with_net bash [root@7169e8be6d3e /]# ifconfig eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet 172.17.0.8 netmask 255.255.0.0 broadcast 0.0.0.0 inet6 fe80::42:acff:fe11:8 prefixlen 64 scopeid 0x20<link> ether 02:42:ac:11:00:08 txqueuelen 0 (Ethernet) RX packets 5942 bytes 15420377 (14.7 MiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 4855 bytes 330480 (322.7 KiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536 inet 127.0.0.1 netmask 255.0.0.0 inet6 ::1 prefixlen 128 scopeid 0x10<host> loop txqueuelen 0 (Local Loopback) RX packets 0 bytes 0 (0.0 B) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 0 bytes 0 (0.0 B) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
none模式
使用–net=none指定,這種模式下不會(huì)配置任何網(wǎng)絡(luò)。
[root@localhost ~]# docker run -it --rm --net=none centos_with_net bash [root@67d037935636 /]# ifconfig lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536 inet 127.0.0.1 netmask 255.0.0.0 inet6 ::1 prefixlen 128 scopeid 0x10<host> loop txqueuelen 0 (Local Loopback) RX packets 0 bytes 0 (0.0 B) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 0 bytes 0 (0.0 B) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
bridge模式(默認(rèn)模式)
使用–net=bridge指定,不用指定默認(rèn)就是這種網(wǎng)絡(luò)模式。這種模式會(huì)為每個(gè)容器分配一個(gè)獨(dú)立的Network Namespace。類似于Vmware的nat網(wǎng)絡(luò)模式。同一個(gè)宿主機(jī)上的所有容器會(huì)在同一個(gè)網(wǎng)段下,相互之間是可以通信的。
感謝閱讀,希望能幫助到大家,謝謝大家對(duì)本站的支持!
- 淺談docker-compose網(wǎng)絡(luò)設(shè)置之networks
- Docker容器訪問(wèn)宿主機(jī)網(wǎng)絡(luò)的方法
- Docker為網(wǎng)絡(luò)bridge模式指定容器ip的方法
- docker 學(xué)習(xí)筆記之docker連接網(wǎng)絡(luò)的設(shè)置
- Docker Compose 網(wǎng)絡(luò)設(shè)置詳解
- Docker網(wǎng)絡(luò)代理設(shè)置詳解
- Docker端口映射實(shí)現(xiàn)網(wǎng)絡(luò)訪問(wèn)的方法
- docker容器內(nèi)網(wǎng)絡(luò)請(qǐng)求緩慢問(wèn)題解決
- centos修改docker網(wǎng)絡(luò)配置方法分享
- Docker網(wǎng)絡(luò)模型以及容器通信詳解續(xù)篇
相關(guān)文章
docker私庫(kù)Harbor的架構(gòu)與組件說(shuō)明
今天小編就為大家分享一篇關(guān)于docker私庫(kù)Harbor的架構(gòu)與組件說(shuō)明,小編覺(jué)得內(nèi)容挺不錯(cuò)的,現(xiàn)在分享給大家,具有很好的參考價(jià)值,需要的朋友一起跟隨小編來(lái)看看吧2018-12-12使用Dockerfile構(gòu)建java web環(huán)境
用dockerfile構(gòu)建一個(gè)Java的web環(huán)境,主要分為2步,第一步是在鏡像中安裝jdk并配置環(huán)境變量,第二步是安裝tomcat,下面分步驟給大家詳細(xì)介紹,一起看看吧2016-12-12CentOS7 Nvidia Docker環(huán)境搭建
本篇文章主要介紹了CentOS7 Nvidia Docker環(huán)境搭建,小編覺(jué)得挺不錯(cuò)的,現(xiàn)在分享給大家,也給大家做個(gè)參考。一起跟隨小編過(guò)來(lái)看看吧2018-02-02理解Docker(1):Docker安裝和基礎(chǔ)用法詳細(xì)介紹
本篇文章主要是介紹了Docker 安裝和基礎(chǔ)用法,對(duì)于想要需要的Docker的同學(xué)可以了解一下。2016-11-11docker?創(chuàng)建容器時(shí)指定容器ip的實(shí)現(xiàn)示例
在實(shí)際部署中,我們需要指定容器ip,本文主要介紹了docker?創(chuàng)建容器時(shí)指定容器ip,文中通過(guò)示例代碼介紹的非常詳細(xì),具有一定的參考價(jià)值,感興趣的小伙伴們可以參考一下2021-12-12使用Docker容器運(yùn)行Mysql實(shí)戰(zhàn)記錄
這篇文章主要給大家介紹了關(guān)于使用Docker容器運(yùn)行Mysql的相關(guān)資料,助大家更好的理解和學(xué)習(xí)使用docker,感興趣的朋友可以了解下,需要的朋友可以參考下2023-09-09