Docker network

标签：sub   12c   adf   errors   rop   其他   size   dock   opp   

[root@docker ~]# docker exec f0b91a485505 ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
[root@docker ~]#
host网络：
host网络是和host主机共享网络，当容器使用了host网络后，会和host使用一样的网络，在docker里面执行“ip a ”后可以看到和host上所有的网络。host网络 的性能比较高，可以在要求性能比较高的场景下使用，当然host网络的短板是不灵活，比如不能和host主机使用同一个端口
[root@docker ~]# docker run --network=host httpd ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
link/ether 00:50:56:95:29:ff brd ff:ff:ff:ff:ff:ff
inet 192.168.1.39/24 brd 192.168.1.255 scope global ens192
valid_lft forever preferred_lft forever
inet6 fe80::250:56ff:fe95:29ff/64 scope link
valid_lft forever preferred_lft forever
3: docker0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default
link/ether 02:42:73:5f:c6:55 brd ff:ff:ff:ff:ff:ff
inet 172.17.0.1/16 scope global docker0
valid_lft forever preferred_lft forever
inet6 fe80::42:73ff:fe5f:c655/64 scope link
valid_lft forever preferred_lft forever
29: veth249d154@if28: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master docker0 state UP group default
link/ether c6:4d:63:06:06:27 brd ff:ff:ff:ff:ff:ff
inet6 fe80::c44d:63ff:fe06:627/64 scope link
valid_lft forever preferred_lft forever
43: vethaf1f205@if42: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master docker0 state UP group default
link/ether d6:c4:51:53:24:7e brd ff:ff:ff:ff:ff:ff
inet6 fe80::d4c4:51ff:fe53:247e/64 scope link
valid_lft forever preferred_lft forever
69: veth86a910d@if68: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master docker0 state UP group default
link/ether c2:a6:16:27:a7:1d brd ff:ff:ff:ff:ff:ff
inet6 fe80::c0a6:16ff:fe27:a71d/64 scope link
valid_lft forever preferred_lft forever
89: vethfeccd23@if88: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master docker0 state UP group default
link/ether 56:0b:f0:42:0a:c9 brd ff:ff:ff:ff:ff:ff
inet6 fe80::540b:f0ff:fe42:ac9/64 scope link
valid_lft forever preferred_lft forever

可以看到容器中已经能看到host的所有网络

birdge 网络：
bridge网络是最常用的网络，docker 服务本身提供 了一个docker0的网络
[root@docker ~]# brctl show
bridge name bridge id STP enabled interfaces
docker0 8000.0242735fc655 no veth249d154

我们创建的容器的设备会和这个桥上的接口是一对 veth pair。下面我们看怎么区分是一堆veth pair

这样就可以找到这对veth pair了

可以用命令看到 网络的详细信息
[root@docker ~]# docker network inspect bridge
[
{
"Name": "bridge",
"Id": "36414aee064de73ff8fcd71b470507ff82dd4ae91be32cc03ed80b6ad240a94e",
"Created": "2018-06-19T02:48:01.107394423+08:00",
"Scope": "local",
"Driver": "bridge",
"EnableIPv6": false,
"IPAM": {
"Driver": "default",
"Options": null,
"Config": [
{
"Subnet": "172.17.0.0/16",
"Gateway": "172.17.0.1"
}
]
},
"Internal": false,
"Attachable": false,
"Containers": {
"05f082b8a57c1304a0d3f4eaed3d677f12af0638f1c3092cc2b267ce7051ab4f": {
"Name": "test-1",
"EndpointID": "1079bdb32cbc1f8c5677d4be9d8fc7cb0f33c43ba28070e13adf6a0fc69f0fa5",
"MacAddress": "02:42:ac:11:00:05",
"IPv4Address": "172.17.0.5/16",
"IPv6Address": ""
},
"6d15d629bccb5c69f5e0644bcda6d50d08efd72ea6b2e23ebcec1cd0a797c51c": {
"Name": "laughing_blackwell",
"EndpointID": "d98dc85e0fd4df9dfb39a242936183c8bf6e2e984e1f05b25cb85f78ef5f8ab4",
"MacAddress": "02:42:ac:11:00:02",
"IPv4Address": "172.17.0.2/16",
"IPv6Address": ""
},
"98219ea6e0efb30f601d4f831f8a661757512c2d409f3368c481fd8347836024": {
"Name": "httpd-1",
"EndpointID": "85b3ee2038a815434d887271b6b8ca8145f156ffd62272a3b0a73661f3f97b50",
"MacAddress": "02:42:ac:11:00:04",
"IPv4Address": "172.17.0.4/16",
"IPv6Address": ""
},
"ea88011707af990740229ef0eba0954566df2ccf5a84d2349cb9093e0ffcf751": {
"Name": "my-registry",
"EndpointID": "8bed7766e1f0f53ee95a0a616a4e5c31ae120f9324598d1a143e1c9ded95b37c",
"MacAddress": "02:42:ac:11:00:03",
"IPv4Address": "172.17.0.3/16",
"IPv6Address": ""
}
},
"Options": {
"com.docker.network.bridge.default_bridge": "true",
"com.docker.network.bridge.enable_icc": "true",
"com.docker.network.bridge.enable_ip_masquerade": "true",
"com.docker.network.bridge.host_binding_ipv4": "0.0.0.0",
"com.docker.network.bridge.name": "docker0",
"com.docker.network.driver.mtu": "1500"
},
"Labels": {}
}
]
[root@docker ~]#

可以看到每个容器的ip地址

user-define network:
查看现在的网络
[root@docker ~]# brctl show
bridge name bridge id STP enabled interfaces
docker0 8000.0242735fc655 no veth249d154
veth86a910d
vethaf1f205
vethfeccd23
创建一个bridge网络
[root@docker ~]# docker network create --driver bridge my_bridge
85da3fbbacbc395364a9a13d95d018da4932caf9542cf21d5315672b3a4e5265
查看现在的网络
[root@docker ~]# brctl show
bridge name bridge id STP enabled interfaces
br-85da3fbbacbc 8000.0242a644c794 no
docker0 8000.0242735fc655 no veth249d154
veth86a910d
vethaf1f205
vethfeccd23

[root@docker ~]# docker network ls
NETWORK ID NAME DRIVER SCOPE
36414aee064d bridge bridge local
89cd8e7304db host host local
85da3fbbacbc my_bridge bridge local
06996adc6218 none null local
[root@docker ~]#

创建网络时不指定网络的ip，系统会自动为其分配子网和ip，我们现在自己为其指定ip网段
root@docker ~]# docker network create --driver bridge --subnet 192.168.100.0/24 --gateway=192.168.100.1 my_bridge02
1555bc9399f5aea71c6b84b3065f376c1358c841ecb83ca8e5a4b4b0dfda89a6
[root@docker ~]# brctl show
bridge name bridge id STP enabled interfaces
br-1555bc9399f5 8000.0242dc345fca no
br-85da3fbbacbc 8000.0242a644c794 no
docker0 8000.0242735fc655 no veth249d154
veth86a910d
vethaf1f205
vethfeccd23
在host 主机查看我们刚刚创建的桥
[root@docker ~]# ifconfig br-1555bc9399f5
br-1555bc9399f5: flags=4099<UP,BROADCAST,MULTICAST> mtu 1500
inet 192.168.100.1 netmask 255.255.255.0 broadcast 0.0.0.0
ether 02:42:dc:34:5f:ca txqueuelen 0 (Ethernet)
RX packets 0 bytes 0 (0.0 B)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 0 bytes 0 (0.0 B)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

[root@docker ~]#

我们在创建虚拟机时指定我创建的网络就好
[root@docker ~]# docker run -it --name "test-my_ip" --network=my_bridge02 httpd ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
114: eth0@if115: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default
link/ether 02:42:c0:a8:64:02 brd ff:ff:ff:ff:ff:ff
inet 192.168.100.2/24 scope global eth0
valid_lft forever preferred_lft forever
inet6 fe80::42:c0ff:fea8:6402/64 scope link tentative
valid_lft forever preferred_lft forever
[root@docker ~]#

为容器指定ip地址
[root@docker ~]# docker run -d --name "test-static-ip" --network=my_bridge02 --ip 192.168.100.10 httpd
1a3f2977da80c908cdb56c290d052b53a5b50daef1006d4d4603680cc2637d3a
[root@docker ~]# docker exec test-static-ip ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
140: eth0@if141: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default
link/ether 02:42:c0:a8:64:0a brd ff:ff:ff:ff:ff:ff
inet 192.168.100.10/24 scope global eth0
valid_lft forever preferred_lft forever
inet6 fe80::42:c0ff:fea8:640a/64 scope link
valid_lft forever preferred_lft forever
[root@docker ~]#

可以看到 我们指定的ip了

我们还可以为容器添加bridge port 首先查看 docker的网络
root@1a3f2977da80:~# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
140: eth0@if141: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default
link/ether 02:42:c0:a8:64:0a brd ff:ff:ff:ff:ff:ff
inet 192.168.100.10/24 scope global eth0
valid_lft forever preferred_lft forever
inet6 fe80::42:c0ff:fea8:640a/64 scope link
valid_lft forever preferred_lft forever
我们为其添加一个网络
[root@docker ~]# docker network connect my_bridge 1a3f2977da80
再次查看
root@1a3f2977da80:~# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
140: eth0@if141: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default
link/ether 02:42:c0:a8:64:0a brd ff:ff:ff:ff:ff:ff
inet 192.168.100.10/24 scope global eth0
valid_lft forever preferred_lft forever
inet6 fe80::42:c0ff:fea8:640a/64 scope link
valid_lft forever preferred_lft forever
142: eth1@if143: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default
link/ether 02:42:ac:12:00:02 brd ff:ff:ff:ff:ff:ff
inet 172.18.0.2/16 scope global eth1
valid_lft forever preferred_lft forever
inet6 fe80::42:acff:fe12:2/64 scope link
valid_lft forever preferred_lft forever

可以看到容器已经 存在IP了

Docker network

标签：sub   12c   adf   errors   rop   其他   size   dock   opp   

原文地址：http://blog.51cto.com/shyln/2133385