Book Image

Docker Networking Cookbook

Book Image

Docker Networking Cookbook

Overview of this book

Networking functionality in Docker has changed considerably since its first release, evolving to offer a rich set of built-in networking features, as well as an extensible plugin model allowing for a wide variety of networking functionality. This book explores Docker networking capabilities from end to end. Begin by examining the building blocks used by Docker to implement fundamental containing networking before learning how to consume built-in networking constructs as well as custom networks you create on your own. Next, explore common third-party networking plugins, including detailed information on how these plugins inter-operate with the Docker engine. Consider available options for securing container networks, as well as a process for troubleshooting container connectivity. Finally, examine advanced Docker networking functions and their relevant use cases, tying together everything you need to succeed with your own projects.

Related Content you might be interested in

Current Title:

Small book image
Docker Networking Cookbook
Nov, 2016 | 378 pages
No titles found
Table of Contents (18 chapters)
Docker Networking Cookbook
Docker Networking Cookbook
Credits
Credits
About the Author
About the Author
About the Reviewer
About the Reviewer
www.PacktPub.com
www.PacktPub.com
Preface
Preface
Free Chapter
1
Linux Networking Constructs
Linux Networking Constructs
Introduction
Working with interfaces and addresses
Configuring Linux host routing
Exploring bridges
Making connections
Exploring network namespaces
2
Configuring and Monitoring Docker Networks
Configuring and Monitoring Docker Networks
Introduction
Verifying host-level settings that impact Docker networking
Connecting containers in bridge mode
Exposing and publishing ports
Connecting containers to existing containers
Connecting containers in host mode
Configuring service-level settings
3
User-Defined Networks
User-Defined Networks
Introduction
Viewing the Docker network configuration
Creating user-defined networks
Connecting containers to networks
Defining a user-defined bridge network
Creating a user-defined overlay network
Isolating networks
4
Building Docker Networks
Building Docker Networks
Introduction
Manually networking containers
Specifying your own bridge
Using an OVS bridge
Using an OVS bridge to connect Docker hosts
OVS and Docker together
5
Container Linking and Docker DNS
Container Linking and Docker DNS
Introduction
Verifying a host-based DNS configuration inside a container
Overriding the default name resolution settings
Configuring links for name and service resolution
Leveraging Docker DNS
Creating Docker DNS aliases
6
Securing Container Networks
Securing Container Networks
Introduction
Enabling and disabling ICC
Disabling outbound masquerading
Managing netfilter to Docker integration
Creating custom iptables rules
Exposing services through a load balancer
7
Working with Weave Net
Working with Weave Net
Introduction
Installing and configuring Weave
Running Weave-connected containers
Understanding Weave IPAM
Working with WeaveDNS
Weave security
Using the Weave network plugin
8
Working with Flannel
Working with Flannel
Introduction
Installing and configuring Flannel
Integrating Flannel with Docker
Using the VXLAN backend
Using the host gateway backend
Specifying Flannel options
9
Exploring Network Features
Exploring Network Features
Introduction
Working with prerelease versions of Docker
Understanding MacVLAN interfaces
Working with the Docker MacVLAN network driver
Understanding IPVLAN interfaces
Working with the Docker IPVLAN network driver
Tagging VLAN IDs with MacVLAN and IPVLAN networks
10
Leveraging IPv6
Leveraging IPv6
Introduction
IPv6 command-line basics
Enabling IPv6 capabilities in Docker
Working with IPv6-enabled containers
Configuring NDP proxying
User-defined networks and IPv6
11
Troubleshooting Docker Networks
Troubleshooting Docker Networks
Introduction
Using tcpdump to verify network paths
Verifying VETH pairs
Verifying published ports and outbound masquerading
Verifying name resolution
Building a test container
Resetting the local Docker network database
Index
Index

Introduction

Although many of the features we've discussed in earlier chapters have been here since day one, many have been very recently introduced. Docker is a rapidly evolving piece of open source software with many contributors. To manage the introduction, testing, and potential release of features, Docker releases code in a couple of different ways. In this chapter, we'll show how you can explore features that are not yet in the production or release version of the software. As part of this, we'll review two of the newer networking features that have been introduced to Docker. One of which, MacVLAN, was recently merged into the release version of the software as of version 1.12. The second, IPVLAN, is still in the prerelease software channel. After we review how to consume the Docker prerelease software channels, we'll discuss the basic operation of both MacVLAN and IPVLAN network interfaces and then discuss how they are implemented as drivers in Docker.

Previous Section
End of Section 2
Next Section