Docker Networking Cookbook

Docker Networking Cookbook

Overview of this book

Networking functionality in Docker has changed considerably since its first release, evolving to offer a rich set of built-in networking features, as well as an extensible plugin model allowing for a wide variety of networking functionality. This book explores Docker networking capabilities from end to end. Begin by examining the building blocks used by Docker to implement fundamental containing networking before learning how to consume built-in networking constructs as well as custom networks you create on your own. Next, explore common third-party networking plugins, including detailed information on how these plugins inter-operate with the Docker engine. Consider available options for securing container networks, as well as a process for troubleshooting container connectivity. Finally, examine advanced Docker networking functions and their relevant use cases, tying together everything you need to succeed with your own projects.

Docker Networking Cookbook

Credits

About the Author

About the Reviewer

www.PacktPub.com

Preface

Free Chapter

Linux Networking Constructs

Introduction

Working with interfaces and addresses

Configuring Linux host routing

Exploring bridges

Making connections

Exploring network namespaces

Configuring and Monitoring Docker Networks

Introduction

Verifying host-level settings that impact Docker networking

Connecting containers in bridge mode

Exposing and publishing ports

Connecting containers to existing containers

Connecting containers in host mode

Configuring service-level settings

User-Defined Networks

Introduction

Viewing the Docker network configuration

Creating user-defined networks

Connecting containers to networks

Defining a user-defined bridge network

Creating a user-defined overlay network

Isolating networks

Building Docker Networks

Introduction

Manually networking containers

Specifying your own bridge

Using an OVS bridge

Using an OVS bridge to connect Docker hosts

OVS and Docker together

Container Linking and Docker DNS

Introduction

Verifying a host-based DNS configuration inside a container

Overriding the default name resolution settings

Configuring links for name and service resolution

Leveraging Docker DNS

Creating Docker DNS aliases

Securing Container Networks

Introduction

Enabling and disabling ICC

Disabling outbound masquerading

Managing netfilter to Docker integration

Creating custom iptables rules

Exposing services through a load balancer

Working with Weave Net

Introduction

Installing and configuring Weave

Running Weave-connected containers

Understanding Weave IPAM

Working with WeaveDNS

Weave security

Using the Weave network plugin

Working with Flannel

Introduction

Installing and configuring Flannel

Integrating Flannel with Docker

Using the VXLAN backend

Using the host gateway backend

Specifying Flannel options

Exploring Network Features

Introduction

Working with prerelease versions of Docker

Understanding MacVLAN interfaces

Working with the Docker MacVLAN network driver

Understanding IPVLAN interfaces

Working with the Docker IPVLAN network driver

Tagging VLAN IDs with MacVLAN and IPVLAN networks

Leveraging IPv6

Introduction

IPv6 command-line basics

Enabling IPv6 capabilities in Docker

Working with IPv6-enabled containers

Configuring NDP proxying

User-defined networks and IPv6

Troubleshooting Docker Networks

Introduction

Using tcpdump to verify network paths

Verifying VETH pairs

Verifying published ports and outbound masquerading

Verifying name resolution

Building a test container

Resetting the local Docker network database

Index

Customer Reviews

5 star

4 star

3 star

2 star

1 star

Working with the Docker MacVLAN network driver

When I began writing this book, the current version of Docker was 1.10 and at that time MacVLAN functionality was included in the release candidate version of Docker. Since then, version 1.12 has been released, which pushed MacVLAN into the release version of the software. That being said, the only requirement to use the MacVLAN driver is to ensure that you have a 1.12 or newer version of Docker installed. In this chapter, we'll review how to consume the MacVLAN network driver for containers provisioned from Docker.

Getting ready

In this recipe, we'll be using two Linux hosts running Docker. Our lab topology will consist of two Docker hosts that live on the same network. It will look like this:

It is assumed that each host is running a version of Docker that is 1.12 or greater in order to have access to the MacVLAN driver. The hosts should have a single IP interface and Docker should be in its default configuration. In some cases, the changes we...

Docker Networking Cookbook

Docker Networking Cookbook

Overview of this book

Related Content you might be interested in

Current Title:

Docker Networking Cookbook

Working with the Docker MacVLAN network driver

Getting ready