经验首页 前端设计 程序设计 Java相关 移动开发 数据库/运维 软件/图像 大数据/云计算 其他经验
当前位置：技术经验 » 程序设计 » Docker » 查看文章
docker网络配置过程详解介绍
来源：jb51　　时间：2021/12/8 17:00:49　　对本文有异议

Linux内核实现名称空间的创建

ip netns命令

可以借助ip netns命令来完成对 Network Namespace 的各种操作。ip netns命令来自于iproute安装包，一般系统会默认安装，如果没有的话，请自行安装。

注意：ip netns命令修改网络配置时需要 sudo 权限。

可以通过ip netns命令完成对Network Namespace 的相关操作，可以通过ip netns help查看命令帮助信息：

  1. [root@master ~]# ip netns help
  2. Usage:  ip netns list
  3.         ip netns add NAME
  4.         ip netns attach NAME PID
  5.         ip netns set NAME NETNSID
  6.         ip [-all] netns delete [NAME]
  7.         ip netns identify [PID]
  8.         ip netns pids NAME
  9.         ip [-all] netns exec [NAME] cmd ...
  10.         ip netns monitor
  11.         ip netns list-id [target-nsid POSITIVE-INT] [nsid POSITIVE-INT]
  12. NETNSID := auto | POSITIVE-INT
  13. [root@master ~]# ip netns list
  14. [root@master ~]# ip netns add ns0
  15. [root@master ~]# ip netns list
  16. ns0
  17. [root@master ~]# ls /var/run/netns
  18. ns0
  19. [root@master ~]# ip netns add ns0
  20. Cannot create namespace file "/var/run/netns/ns0": File exists
  21. [root@master ~]# touch /var/run/netns/ns1
  22. [root@master ~]# ip netns list
  23. Error: Peer netns reference is invalid.
  24. Error: Peer netns reference is invalid.
  25. ns1
  26. ns0
  27. [root@master ~]# ip netns del ns1
  28. [root@master ~]# ip netns list
  29. ns0
  30.  

操作Network Namespace

ip命令提供了ip netns exec子命令可以在对应的 Network Namespace 中执行命令。

查看新创建 Network Namespace 的网卡信息

  1. [root@master ~]# ip netns exec ns0 ip addr
  2. 1: lo: <LOOPBACK> mtu 65536 qdisc noop state DOWN group default qlen 1000
  3.     link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
  4. 可以看到，新创建的Network Namespace中会默认创建一个lo回环网卡，此时网卡处于关闭状态。此时，尝试去 ping 该lo回环网卡，会提示Network is unreachable
  5. [root@master ~]# ip netns exec ns0 ping 127.0.0.1
  6. connect: 网络不可达
  7. 通过下面的命令启用lo回环网卡
  8. [root@master ~]# ip netns exec ns0 ip link set lo up
  9. [root@master ~]# ip netns exec ns0 ping 127.0.0.1
  10. PING 127.0.0.1 (127.0.0.1) 56(84) bytes of data.
  11. 64 bytes from 127.0.0.1: icmp_seq=1 ttl=64 time=0.024 ms
  12. 64 bytes from 127.0.0.1: icmp_seq=2 ttl=64 time=0.019 ms
  13.  

转移设备

我们可以在不同的 Network Namespace 之间转移设备（如veth）。由于一个设备只能属于一个 Network Namespace ，所以转移后在这个 Network Namespace 内就看不到这个设备了。

其中，veth设备属于可转移设备，而很多其它设备（如lo、vxlan、ppp、bridge等）是不可以转移的。

veth pair

veth pair 全称是 Virtual Ethernet Pair，是一个成对的端口，所有从这对端口一 端进入的数据包都将从另一端出来，反之也是一样。

引入veth pair是为了在不同的 Network Namespace 直接进行通信，利用它可以直接将两个 Network Namespace 连接起来。

在这里插入图片描述

创建veth pair

  1. [root@master ~]# ip a
  2. 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
  3.     link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
  4.     inet 127.0.0.1/8 scope host lo
  5.        valid_lft forever preferred_lft forever
  6.     inet6 ::1/128 scope host 
  7.        valid_lft forever preferred_lft forever
  8. 2: ens33: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
  9.     link/ether 00:0c:29:d7:ce:07 brd ff:ff:ff:ff:ff:ff
  10.     inet 192.168.197.131/24 brd 192.168.197.255 scope global dynamic noprefixroute ens33
  11.        valid_lft 1522sec preferred_lft 1522sec
  12.     inet6 fe80::1f2f:a9f9:78a7:7cc/64 scope link noprefixroute 
  13.        valid_lft forever preferred_lft forever
  14. 3: virbr0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default qlen 1000
  15.     link/ether 52:54:00:f1:42:78 brd ff:ff:ff:ff:ff:ff
  16.     inet 192.168.122.1/24 brd 192.168.122.255 scope global virbr0
  17.        valid_lft forever preferred_lft forever
  18. 4: virbr0-nic: <BROADCAST,MULTICAST> mtu 1500 qdisc fq_codel master virbr0 state DOWN group default qlen 1000
  19.     link/ether 52:54:00:f1:42:78 brd ff:ff:ff:ff:ff:ff
  20. 5: docker0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default 
  21.     link/ether 02:42:b8:38:aa:7d brd ff:ff:ff:ff:ff:ff
  22.     inet 172.17.0.1/16 brd 172.17.255.255 scope global docker0
  23.        valid_lft forever preferred_lft forever
  24.     inet6 fe80::42:b8ff:fe38:aa7d/64 scope link 
  25.        valid_lft forever preferred_lft forever
  26. 7: veth2672252@if6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master docker0 state UP group default 
  27.     link/ether ca:56:6c:07:de:af brd ff:ff:ff:ff:ff:ff link-netnsid 0
  28.     inet6 fe80::c856:6cff:fe07:deaf/64 scope link 
  29.        valid_lft forever preferred_lft forever
  30. [root@master ~]# ip link add type veth
  31. [root@master ~]# ip a
  32. 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
  33.     link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
  34.     inet 127.0.0.1/8 scope host lo
  35.        valid_lft forever preferred_lft forever
  36.     inet6 ::1/128 scope host 
  37.        valid_lft forever preferred_lft forever
  38. 2: ens33: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
  39.     link/ether 00:0c:29:d7:ce:07 brd ff:ff:ff:ff:ff:ff
  40.     inet 192.168.197.131/24 brd 192.168.197.255 scope global dynamic noprefixroute ens33
  41.        valid_lft 1499sec preferred_lft 1499sec
  42.     inet6 fe80::1f2f:a9f9:78a7:7cc/64 scope link noprefixroute 
  43.        valid_lft forever preferred_lft forever
  44. 3: virbr0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default qlen 1000
  45.     link/ether 52:54:00:f1:42:78 brd ff:ff:ff:ff:ff:ff
  46.     inet 192.168.122.1/24 brd 192.168.122.255 scope global virbr0
  47.        valid_lft forever preferred_lft forever
  48. 4: virbr0-nic: <BROADCAST,MULTICAST> mtu 1500 qdisc fq_codel master virbr0 state DOWN group default qlen 1000
  49.     link/ether 52:54:00:f1:42:78 brd ff:ff:ff:ff:ff:ff
  50. 5: docker0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default 
  51.     link/ether 02:42:b8:38:aa:7d brd ff:ff:ff:ff:ff:ff
  52.     inet 172.17.0.1/16 brd 172.17.255.255 scope global docker0
  53.        valid_lft forever preferred_lft forever
  54.     inet6 fe80::42:b8ff:fe38:aa7d/64 scope link 
  55.        valid_lft forever preferred_lft forever
  56. 7: veth2672252@if6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master docker0 state UP group default 
  57.     link/ether ca:56:6c:07:de:af brd ff:ff:ff:ff:ff:ff link-netnsid 0
  58.     inet6 fe80::c856:6cff:fe07:deaf/64 scope link 
  59.        valid_lft forever preferred_lft forever
  60. 10: veth0@veth1: <BROADCAST,MULTICAST,M-DOWN> mtu 1500 qdisc noop state DOWN group default qlen 1000
  61.     link/ether a2:0f:68:39:2c:fd brd ff:ff:ff:ff:ff:ff
  62. 11: veth1@veth0: <BROADCAST,MULTICAST,M-DOWN> mtu 1500 qdisc noop state DOWN group default qlen 1000
  63.     link/ether e6:e9:55:96:60:35 brd ff:ff:ff:ff:ff:ff
  64.  

可以看到，此时系统中新增了一对veth pair，将veth0和veth1两个虚拟网卡连接了起来，此时这对 veth pair 处于”未启用“状态。

实现Network Namespace间通信

  1. [root@master ~]#  ip netns list
  2. ns0
  3. [root@master ~]# ip netns add ns1
  4. [root@master ~]# ip link set veth0 netns ns0
  5. [root@master ~]# ip link set veth1 netns ns1
  6. [root@master ~]# ip netns exec ns0 ip link set veth0 up
  7. [root@master ~]# ip netns exec ns0 ip addr add 192.168.2.1/24 dev veth0
  8. [root@master ~]# ip netns exec ns1 ip link set veth1 up
  9. [root@master ~]# ip netns exec ns1  ip addr add 192.168.2.2/24 dev veth1
  10. [root@master ~]# ip netns exec ns0 ip a
  11. 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
  12.     link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
  13.     inet 127.0.0.1/8 scope host lo
  14.        valid_lft forever preferred_lft forever
  15.     inet6 ::1/128 scope host 
  16.        valid_lft forever preferred_lft forever
  17. 10: veth0@if11: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
  18.     link/ether a2:0f:68:39:2c:fd brd ff:ff:ff:ff:ff:ff link-netns ns1
  19.     inet 192.168.2.1/24 scope global veth0
  20.        valid_lft forever preferred_lft forever
  21.     inet6 fe80::a00f:68ff:fe39:2cfd/64 scope link 
  22.        valid_lft forever preferred_lft forever
  23. [root@master ~]# ip netns exec ns1 ip a
  24. 1: lo: <LOOPBACK> mtu 65536 qdisc noop state DOWN group default qlen 1000
  25.     link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
  26. 11: veth1@if10: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
  27.     link/ether e6:e9:55:96:60:35 brd ff:ff:ff:ff:ff:ff link-netns ns0
  28.     inet 192.168.2.2/24 scope global veth1
  29.        valid_lft forever preferred_lft forever
  30.     inet6 fe80::e4e9:55ff:fe96:6035/64 scope link 
  31.        valid_lft forever preferred_lft forever
  32. [root@master ~]# ip netns exec ns1 ping 192.168.2.1
  33. PING 192.168.2.1 (192.168.2.1) 56(84) bytes of data.
  34. 64 bytes from 192.168.2.1: icmp_seq=1 ttl=64 time=0.037 ms
  35. 64 bytes from 192.168.2.1: icmp_seq=2 ttl=64 time=0.028 ms
  36.  

可以看到，veth pair成功实现了两个不同Network Namespace之间的网络交互。

veth设备重命名

  1. [root@master ~]# ip netns exec ns0 ip link set veth0 down
  2. [root@master ~]# ip netns exec ns0 ip link set veth0 down
  3. [root@master ~]# ip netns exec ns0 ip link set veth0 down
  4. [root@master ~]# ip netns exec ns0 ip a
  5. 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
  6.     link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
  7.     inet 127.0.0.1/8 scope host lo
  8.        valid_lft forever preferred_lft forever
  9.     inet6 ::1/128 scope host 
  10.        valid_lft forever preferred_lft forever
  11. 10: veth0@if11: <BROADCAST,MULTICAST> mtu 1500 qdisc noqueue state DOWN group default qlen 1000
  12.     link/ether a2:0f:68:39:2c:fd brd ff:ff:ff:ff:ff:ff link-netns ns1
  13.     inet 192.168.2.1/24 scope global veth0
  14.        valid_lft forever preferred_lft forever
  15. [root@master ~]# ip netns exec ns1 ip link set veth1 down 
  16. [root@master ~]# ip netns exec ns1 ip link  set dev veth1 name eth0
  17. [root@master ~]# ip netns exec ns1 ip link set eth0
  18. [root@master ~]# ip netns exec ns1 ip a
  19. 1: lo: <LOOPBACK> mtu 65536 qdisc noop state DOWN group default qlen 1000
  20.     link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
  21. 11: eth0@if10: <BROADCAST,MULTICAST> mtu 1500 qdisc noqueue state DOWN group default qlen 1000
  22.     link/ether e6:e9:55:96:60:35 brd ff:ff:ff:ff:ff:ff link-netns ns0
  23.     inet 192.168.2.2/24 scope global eth0
  24.        valid_lft forever preferred_lft forever

四种网络模式配置

bridge模式

  1. [root@master ~]# docker pull busybox
  2. Using default tag: latest
  3. latest: Pulling from library/busybox
  4. 3aab638df1a9: Pull complete 
  5. Digest: sha256:52817dece4cfe26f581c834d27a8e1bcc82194f914afe6d50afad5a101234ef1
  6. Status: Downloaded newer image for busybox:latest
  7. docker.io/library/busybox:latest
  8. [root@master ~]# docker run -it --name b1 --rm busybox # --rm 删除或停止容器后自动销毁容器
  9. / # ip a
  10. 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue qlen 1000
  11.     link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
  12.     inet 127.0.0.1/8 scope host lo
  13.        valid_lft forever preferred_lft forever
  14. 12: eth0@if13: <BROADCAST,MULTICAST,UP,LOWER_UP,M-DOWN> mtu 1500 qdisc noqueue 
  15.     link/ether 02:42:ac:11:00:03 brd ff:ff:ff:ff:ff:ff
  16.     inet 172.17.0.3/16 brd 172.17.255.255 scope global eth0
  17.        valid_lft forever preferred_lft forever
  18. / # exit
  19. [root@master ~]# docker run -it --name b1 --network bridge --rm busybox
  20. / # ip a
  21. 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue qlen 1000
  22.     link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
  23.     inet 127.0.0.1/8 scope host lo
  24.        valid_lft forever preferred_lft forever
  25. 14: eth0@if15: <BROADCAST,MULTICAST,UP,LOWER_UP,M-DOWN> mtu 1500 qdisc noqueue 
  26.     link/ether 02:42:ac:11:00:03 brd ff:ff:ff:ff:ff:ff
  27.     inet 172.17.0.3/16 brd 172.17.255.255 scope global eth0
  28.        valid_lft forever preferred_lft forever
  29. / # exit
  30.  

none模式

  1. [root@master ~]# docker run -it --name b2 --rm --network none busybox
  2. / # ip a
  3. 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue qlen 1000
  4.     link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
  5.     inet 127.0.0.1/8 scope host lo
  6.        valid_lft forever preferred_lft forever
  7. / # exit
  8. 使用none模式，Docker容器拥有自己的Network Namespace，但是，并不为Docker容器进行任何网络配置。也就是说，这个Docker容器没有网卡、IP、路由等信息。需要我们自己为Docker容器添加网卡、配置IP等。

container模式

  1. [root@master ~]# docker run -it --name b3 --rm busybox
  2. / #  ip a
  3. 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue qlen 1000
  4.     link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
  5.     inet 127.0.0.1/8 scope host lo
  6.        valid_lft forever preferred_lft forever
  7. 16: eth0@if17: <BROADCAST,MULTICAST,UP,LOWER_UP,M-DOWN> mtu 1500 qdisc noqueue 
  8.     link/ether 02:42:ac:11:00:03 brd ff:ff:ff:ff:ff:ff
  9.     inet 172.17.0.3/16 brd 172.17.255.255 scope global eth0
  10.        valid_lft forever preferred_lft forever
  11. 新开一个终端
  12. [root@master ~]# docker run -it --name b4 --rm --network container:b3 busybox
  13. / # ip a
  14. 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue qlen 1000
  15.     link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
  16.     inet 127.0.0.1/8 scope host lo
  17.        valid_lft forever preferred_lft forever
  18. 16: eth0@if17: <BROADCAST,MULTICAST,UP,LOWER_UP,M-DOWN> mtu 1500 qdisc noqueue 
  19.     link/ether 02:42:ac:11:00:03 brd ff:ff:ff:ff:ff:ff
  20.     inet 172.17.0.3/16 brd 172.17.255.255 scope global eth0
  21.        valid_lft forever preferred_lft forever
  22.  在b3上创建一个文件
  23. / # ls
  24. bin   dev   etc   home  proc  root  sys   tmp   usr   var
  25. / # mkdir yy
  26. 在b4上查看
  27. / # ls
  28. bin   dev   etc   home  proc  root  sys   tmp   usr   var
  29. 在b3上创建网站
  30. / # echo "aaa." > bbb/index.html
  31. / # httpd -h bbb/
  32. / # netstat -antl
  33. Active Internet connections (servers and established)
  34. Proto Recv-Q Send-Q Local Address           Foreign Address         State       
  35. tcp        0      0 :::80                   :::*                    LISTE
  36.  
  37. # 在b4上访问
  38. / # wget -qO - 172.17.0.2
  39. aaa
  40. / #
  41. # 由此可见，container模式下的容器间关系就相当于一台主机上的两个不同进程
  42.  

这个模式指定新创建的容器和已经存在的一个容器共享一个 Network Namespace，而不是和宿主机共享。新创建的容器不会创建自己的网卡，配置自己的 IP，而是和一个指定的容器共享 IP、端口范围等。同样，两个容器除了网络方面，其他的如文件系统、进程列表等还是隔离的。两个容器的进程可以通过 lo 网卡设备通信。

host模式
启动容器时直接指明模式为host

  1. [root@master ~]# docker run -it --name b5 --rm --network host busybox
  2. / # ip a 
  3. 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue qlen 1000
  4.     link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
  5.     inet 127.0.0.1/8 scope host lo
  6.        valid_lft forever preferred_lft forever
  7.     inet6 ::1/128 scope host 
  8.        valid_lft forever preferred_lft forever
  9. 2: ens33: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel qlen 1000
  10.     link/ether 00:0c:29:d7:ce:07 brd ff:ff:ff:ff:ff:ff
  11.     inet 192.168.197.131/24 brd 192.168.197.255 scope global dynamic noprefixroute ens33
  12.        valid_lft 1741sec preferred_lft 1741sec
  13.     inet6 fe80::1f2f:a9f9:78a7:7cc/64 scope link noprefixroute 
  14.        valid_lft forever preferred_lft forever
  15. 3: virbr0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue qlen 1000
  16.     link/ether 52:54:00:f1:42:78 brd ff:ff:ff:ff:ff:ff
  17.     inet 192.168.122.1/24 brd 192.168.122.255 scope global virbr0
  18.        valid_lft forever preferred_lft forever
  19. 4: virbr0-nic: <BROADCAST,MULTICAST> mtu 1500 qdisc fq_codel master virbr0 qlen 1000
  20.     link/ether 52:54:00:f1:42:78 brd ff:ff:ff:ff:ff:ff
  21. 5: docker0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue 
  22.     link/ether 02:42:b8:38:aa:7d brd ff:ff:ff:ff:ff:ff
  23.     inet 172.17.0.1/16 brd 172.17.255.255 scope global docker0
  24.        valid_lft forever preferred_lft forever
  25.     inet6 fe80::42:b8ff:fe38:aa7d/64 scope link 
  26.        valid_lft forever preferred_lft forever
  27. 7: veth2672252@if6: <BROADCAST,MULTICAST,UP,LOWER_UP,M-DOWN> mtu 1500 qdisc noqueue master docker0 
  28.     link/ether ca:56:6c:07:de:af brd ff:ff:ff:ff:ff:ff
  29.     inet6 fe80::c856:6cff:fe07:deaf/64 scope link 
  30.        valid_lft forever preferred_lft forever
  31. / # mkdir www
  32. / # echo "ccc" > www/index.html
  33. / # httpd -h www/
  34. / # 
  35. [root@master ~]# ip a
  36. 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
  37.     link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
  38.     inet 127.0.0.1/8 scope host lo
  39.        valid_lft forever preferred_lft forever
  40.     inet6 ::1/128 scope host 
  41.        valid_lft forever preferred_lft forever
  42. 2: ens33: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
  43.     link/ether 00:0c:29:d7:ce:07 brd ff:ff:ff:ff:ff:ff
  44.     inet 192.168.197.131/24 brd 192.168.197.255 scope global dynamic noprefixroute ens33
  45.        valid_lft 1730sec preferred_lft 1730sec
  46.     inet6 fe80::1f2f:a9f9:78a7:7cc/64 scope link noprefixroute 
  47.        valid_lft forever preferred_lft forever
  48. 3: virbr0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default qlen 1000
  49.     link/ether 52:54:00:f1:42:78 brd ff:ff:ff:ff:ff:ff
  50.     inet 192.168.122.1/24 brd 192.168.122.255 scope global virbr0
  51.        valid_lft forever preferred_lft forever
  52. 4: virbr0-nic: <BROADCAST,MULTICAST> mtu 1500 qdisc fq_codel master virbr0 state DOWN group default qlen 1000
  53.     link/ether 52:54:00:f1:42:78 brd ff:ff:ff:ff:ff:ff
  54. 5: docker0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default 
  55.     link/ether 02:42:b8:38:aa:7d brd ff:ff:ff:ff:ff:ff
  56.     inet 172.17.0.1/16 brd 172.17.255.255 scope global docker0
  57.        valid_lft forever preferred_lft forever
  58.     inet6 fe80::42:b8ff:fe38:aa7d/64 scope link 
  59.        valid_lft forever preferred_lft forever
  60. 7: veth2672252@if6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master docker0 state UP group default 
  61.     link/ether ca:56:6c:07:de:af brd ff:ff:ff:ff:ff:ff link-netnsid 0
  62.     inet6 fe80::c856:6cff:fe07:deaf/64 scope link 
  63.        valid_lft forever preferred_lft forever
  64. [root@master ~]# curl 192.168.197.131
  65. ccc

容器的常用操作

  1. [root@master ~]# docker run -it --name b6 --rm busybox
  2. / # hostname
  3. ef156ee78b70
  4. / # exit
  5. [root@master ~]# docker run -it --name b6 --hostname yanghaixx busybox
  6. / # hostname 
  7. yanghaixx
  8. / # cat /etc/hosts
  9. 127.0.0.1       localhost
  10. ::1     localhost ip6-localhost ip6-loopback
  11. fe00::0 ip6-localnet
  12. ff00::0 ip6-mcastprefix
  13. ff02::1 ip6-allnodes
  14. ff02::2 ip6-allrouters
  15. 172.17.0.3      yanghaixx
  16. / # cat /etc/resolv.conf 
  17. # Generated by NetworkManager
  18. search localdomain
  19. nameserver 192.168.197.2
  20. / # ping baidu.com
  21. PING baidu.com (220.181.38.148): 56 data bytes
  22. 64 bytes from 220.181.38.148: seq=0 ttl=127 time=25.224 ms
  23. 64 bytes from 220.181.38.148: seq=1 ttl=127 time=24.795 ms
  24. [root@master ~]# docker run -it --rm  --name b7 --dns 8.8.8.8 --hostname yanghaixx busybox
  25. / # cat /etc/resolv.conf 
  26. search localdomain
  27. nameserver 8.8.8.8
  28.  
  29. / # exit .
  30. [root@master ~]# docker run -it --name b7 --rm --hostname yanghaixx --add-host baidu.com:0.0.0.0  busybox
  31. / # cat /etc/hosts
  32. 127.0.0.1       localhost
  33. ::1     localhost ip6-localhost ip6-loopback
  34. fe00::0 ip6-localnet
  35. ff00::0 ip6-mcastprefix
  36. ff02::1 ip6-allnodes
  37. ff02::2 ip6-allrouters
  38. 0.0.0.0 baidu.com
  39. 172.17.0.3      yanghaixx

端口映射
执行docker run的时候有个-p选项，可以将容器中的应用端口映射到宿主机中，从而实现让外部主机可以通过访问宿主机的某端口来访问容器内应用的目的。

  1. -p选项能够使用多次，其所能够暴露的端口必须是容器确实在监听的端口。
  2.  
  3. -p选项的使用格式：
  4.  
  5. -p
  6. 将指定的容器端口映射至主机所有地址的一个动态端口
  7. 动态端口指的是随机端口，具体的映射结果可使用docker port命令查看。
  1. [root@master ~]# docker run -d --name web1 --rm -p 80 yanghaixx/nginx:v2
  2. 62029a5977a06e07ab5b40c78ce60e9cc519364512bc2e6d5785afd7dc1e090f
  3. [root@master ~]#  docker port web1
  4. 80/tcp -> 0.0.0.0:49153
  5. 80/tcp -> :::49153
  6. [root@master ~]# curl 192.168.197.131:49153
  7. <!DOCTYPE html>
  8. <html>
  9. <head>
  10. <title>Welcome to nginx!</title>
  11. <style>
  12.     body {
  13.         width: 35em;
  14.         margin: 0 auto;
  15.         font-family: Tahoma, Verdana, Arial, sans-serif;
  16.     }
  17. </style>
  18. </head>
  19. <body>
  20. <h1>Welcome to nginx!</h1>
  21. <p>If you see this page, the nginx web server is successfully installed and
  22. working. Further configuration is required.</p>
  23.  
  24. <p>For online documentation and support please refer to
  25. <a href="http://nginx.org/">nginx.org</a>.<br/>
  26. Commercial support is available at
  27. <a href="http://nginx.com/">nginx.com</a>.</p>
  28.  
  29. <p><em>Thank you for using nginx.</em></p>
  30. </body>
  31. </html>
  32.  

将容器端口映射到宿主机的指定端口

  1. [root@master ~]# docker run -itd --name web2 --rm -p 2525:80 yanghaixx/nginx:v2
  2. 62a93a8ef40eec981b2d1682da92523027999991b0294782be38d4565b210ff8
  3. [root@master ~]# docker port web2
  4. 80/tcp -> 0.0.0.0:2525
  5. 80/tcp -> :::2525
  6. [root@master ~]# curl 192.168.197.131:2525
  7. <!DOCTYPE html>
  8. <html>
  9. <head>
  10. <title>Welcome to nginx!</title>
  11. <style>
  12.     body {
  13.         width: 35em;
  14.         margin: 0 auto;
  15.         font-family: Tahoma, Verdana, Arial, sans-serif;
  16.     }
  17. </style>
  18. </head>
  19. <body>
  20. <h1>Welcome to nginx!</h1>
  21. <p>If you see this page, the nginx web server is successfully installed and
  22. working. Further configuration is required.</p>
  23.  
  24. <p>For online documentation and support please refer to
  25. <a href="http://nginx.org/">nginx.org</a>.<br/>
  26. Commercial support is available at
  27. <a href="http://nginx.com/">nginx.com</a>.</p>
  28.  
  29. <p><em>Thank you for using nginx.</em></p>
  30. </body>
  31. </html>
  32.  

自定义docker0桥的网络属性信息

自定义docker0桥的网络属性信息需要修改/etc/docker/daemon.json配置文件

  1. [root@master ~]# vim /etc/docker/daemon.json
  2. [root@master ~]# cat /etc/docker/daemon.json
  3. {
  4.         "registry-mirrors": ["https://q9u587gb.mirror.aliyuncs.com"]
  5.         "bip": "192.168.2.1/24"
  6. }
  7. See "systemctl status docker.service" and "journalctl -xe" for details.
  8. [root@master ~]# ip a
  9. 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
  10.     link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
  11.     inet 127.0.0.1/8 scope host lo
  12.        valid_lft forever preferred_lft forever
  13.     inet6 ::1/128 scope host 
  14.        valid_lft forever preferred_lft forever
  15. 2: ens33: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
  16.     link/ether 00:0c:29:d7:ce:07 brd ff:ff:ff:ff:ff:ff
  17.     inet 192.168.197.131/24 brd 192.168.197.255 scope global dynamic noprefixroute ens33
  18.        valid_lft 1690sec preferred_lft 1690sec
  19.     inet6 fe80::1f2f:a9f9:78a7:7cc/64 scope link noprefixroute 
  20.        valid_lft forever preferred_lft forever
  21. 3: virbr0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default qlen 1000
  22.     link/ether 52:54:00:f1:42:78 brd ff:ff:ff:ff:ff:ff
  23.     inet 192.168.122.1/24 brd 192.168.122.255 scope global virbr0
  24.        valid_lft forever preferred_lft forever
  25. 4: virbr0-nic: <BROADCAST,MULTICAST> mtu 1500 qdisc fq_codel master virbr0 state DOWN group default qlen 1000
  26.     link/ether 52:54:00:f1:42:78 brd ff:ff:ff:ff:ff:ff
  27. 5: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default 
  28.     link/ether 02:42:97:2a:95:42 brd ff:ff:ff:ff:ff:ff
  29.     inet 192.168.2.1/24 brd 192.168.2.255 scope global docker0
  30.        valid_lft forever preferred_lft forever
  31.     inet6 fe80::42:97ff:fe2a:9542/64 scope link 
  32.        valid_lft forever preferred_lft forever

docker创建自定义桥

  1. [root@master ~]# vim /etc/docker/daemon.json
  2. [root@master ~]# cat /etc/docker/daemon.json
  3. {
  4.         "registry-mirrors": ["https://q9u587gb.mirror.aliyuncs.com"]
  5.         "bip": "192.168.2.1/24"
  6. }
  7. See "systemctl status docker.service" and "journalctl -xe" for details.
  8. [root@master ~]# ip a
  9. 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
  10.     link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
  11.     inet 127.0.0.1/8 scope host lo
  12.        valid_lft forever preferred_lft forever
  13.     inet6 ::1/128 scope host 
  14.        valid_lft forever preferred_lft forever
  15. 2: ens33: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
  16.     link/ether 00:0c:29:d7:ce:07 brd ff:ff:ff:ff:ff:ff
  17.     inet 192.168.197.131/24 brd 192.168.197.255 scope global dynamic noprefixroute ens33
  18.        valid_lft 1690sec preferred_lft 1690sec
  19.     inet6 fe80::1f2f:a9f9:78a7:7cc/64 scope link noprefixroute 
  20.        valid_lft forever preferred_lft forever
  21. 3: virbr0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default qlen 1000
  22.     link/ether 52:54:00:f1:42:78 brd ff:ff:ff:ff:ff:ff
  23.     inet 192.168.122.1/24 brd 192.168.122.255 scope global virbr0
  24.        valid_lft forever preferred_lft forever
  25. 4: virbr0-nic: <BROADCAST,MULTICAST> mtu 1500 qdisc fq_codel master virbr0 state DOWN group default qlen 1000
  26.     link/ether 52:54:00:f1:42:78 brd ff:ff:ff:ff:ff:ff
  27. 5: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default 
  28.     link/ether 02:42:97:2a:95:42 brd ff:ff:ff:ff:ff:ff
  29.     inet 192.168.2.1/24 brd 192.168.2.255 scope global docker0
  30.        valid_lft forever preferred_lft forever
  31.     inet6 fe80::42:97ff:fe2a:9542/64 scope link 
  32.        valid_lft forever preferred_lft forever

使用新创建的自定义桥来创建容器：

  1. [root@master ~]# docker run -itd --name web --network br0 --rm yanghaixx/nginx:v2
  2. aec728f703567b36016cf09cde1ffd1036673d7c2d961cae0b81cd09721d5cb9
  3. [root@master ~]# docker exec -it web /bin/bash
  4. [root@aec728f70356 /]# ip a
  5. 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
  6.     link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
  7.     inet 127.0.0.1/8 scope host lo
  8.        valid_lft forever preferred_lft forever
  9. 31: eth0@if32: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default 
  10.     link/ether 02:42:ac:11:01:02 brd ff:ff:ff:ff:ff:ff link-netnsid 0
  11.     inet 172.17.1.2/24 brd 172.17.1.255 scope global eth0
  12.        valid_lft forever preferred_lft forever

再创建一个容器，使用默认的bridge桥：

  1. [root@master ~]# docker run -itd --name web02 --rm luojiatian1904/nginx:v2
  2. 4ee412be6d20b96a18f0b6fc0062beefc2192d906b212134b362ec41be5144ff
  3. [root@master ~]# docker exec -it web02 /bin/bash
  4. [root@4ee412be6d20 /]# ip a
  5. 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
  6.     link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
  7.     inet 127.0.0.1/8 scope host lo
  8.        valid_lft forever preferred_lft forever
  9. 33: eth0@if34: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default 
  10.     link/ether 02:42:c0:a8:02:02 brd ff:ff:ff:ff:ff:ff link-netnsid 0
  11.     inet 192.168.2.2/24 brd 192.168.2.255 scope global eth0
  12.        valid_lft forever preferred_lft forever
  13. [root@4ee412be6d20 /]#

试想一下，此时的b2与b1能否互相通信？如果不能该如何实现通信

  1. # 运行两个容器在不同网段
  2. [root@master ~]# docker run -itd --name web --network br0 --rm yanghaixx/nginx:v2
  3. aec728f703567b36016cf09cde1ffd1036673d7c2d961cae0b81cd09721d5cb9
  4. [root@master ~]# docker exec -it web /bin/bash
  5. [root@aec728f70356 /]# ip a
  6. 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
  7.     link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
  8.     inet 127.0.0.1/8 scope host lo
  9.        valid_lft forever preferred_lft forever
  10. 31: eth0@if32: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default 
  11.     link/ether 02:42:ac:11:01:02 brd ff:ff:ff:ff:ff:ff link-netnsid 0
  12.     inet 172.17.1.2/24 brd 172.17.1.255 scope global eth0
  13.        valid_lft forever preferred_lft forever
  14.  
  15. [root@master ~]# docker run -itd --name web02 --rm yanghaixx/nginx:v2
  16. 4ee412be6d20b96a18f0b6fc0062beefc2192d906b212134b362ec41be5144ff
  17. [root@master ~]# docker exec -it web02 /bin/bash
  18. [root@4ee412be6d20 /]# ip a
  19. 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
  20.     link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
  21.     inet 127.0.0.1/8 scope host lo
  22.        valid_lft forever preferred_lft forever
  23. 33: eth0@if34: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default 
  24.     link/ether 02:42:c0:a8:02:02 brd ff:ff:ff:ff:ff:ff link-netnsid 0
  25.     inet 192.168.2.2/24 brd 192.168.2.255 scope global eth0
  26.        valid_lft forever preferred_lft forever
  27.  
  28.  
  29. [root@master ~]# docker ps -a
  30. CONTAINER ID   IMAGE                     COMMAND                  CREATED         STATUS         PORTS     NAMES
  31. 4ee412be6d20   luojiatian1904/nginx:v2   "/usr/local/nginx/sb…"   2 minutes ago   Up 2 minutes             web02
  32. aec728f70356   luojiatian1904/nginx:v2   "/usr/local/nginx/sb…"   2 minutes ago   Up 2 minutes             web

将br0网络 (C1) 连接到c2(一个容器运行两个桥)

  1. [root@master ~]# docker network connect  br0 aec728f70356(web容器ID)
  2. [root@4ee412be6d20 /]# ip a
  3. 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
  4.     link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
  5.     inet 127.0.0.1/8 scope host lo
  6.        valid_lft forever preferred_lft forever
  7. 33: eth0@if34: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default 
  8.     link/ether 02:42:c0:a8:02:02 brd ff:ff:ff:ff:ff:ff link-netnsid 0
  9.     inet 192.168.2.2/24 brd 192.168.2.255 scope global eth0
  10.        valid_lft forever preferred_lft forever
  11. 35: eth1@if36: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default 
  12.     link/ether 02:42:ac:11:01:03 brd ff:ff:ff:ff:ff:ff link-netnsid 0
  13.     inet 172.17.1.3/24 brd 172.17.1.255 scope global eth1
  14.        valid_lft forever preferred_lft forever
  15.  
  16. [root@4ee412be6d20 /]# ping 172.17.1.2
  17. PING 172.17.1.2 (172.17.1.2) 56(84) bytes of data.
  18. 64 bytes from 172.17.1.2: icmp_seq=1 ttl=64 time=0.095 ms

到此这篇关于docker网络配置过程详解介绍的文章就介绍到这了,更多相关docker网络配置内容请搜索w3xue以前的文章或继续浏览下面的相关文章希望大家以后多多支持w3xue！

 友情链接：直通硅谷 　点职佳 　北美留学生论坛

Docker热门文章

  • docker部署certbot与nginx来获取ssl证书添加https及自动更新
  • 解决docker的tls(ssl)证书过期问题
  • 人工智能,丹青圣手,全平台(原生/Docker)构建Stable-Diffusion-Webui的AI绘画库教程(Python3.10/Pytorch1.13.0)
  • Docker原理
  • docker&nbsp;for&nbsp;windonws之Windows&nbsp;10&nbsp;家庭中文版安装clickhouse&nbsp;22.3版本及配置过程
  • Docker-compose command 有多个命令例子
  • docker修改容器配置文件的3种方法总结
  • 解决docker pull镜像报错的问题
  • Docker在Centos 7上的部署
  • Docker使用Prune命令清理none镜像

    • Docker推荐文章

  • 如何在Linux云服务器上通过Docker Compose部署安装Halo，搭建个人博客网站？
  • 使用Cloudflare Worker加速docker镜像
  • 如何在 Windows 使用 Podman Desktop 取代 Docker Desktop
  • Linux 提权-Docker 容器
  • 配置pod拉取harbor容器镜像仓库私有镜像：secret保存账号密码
  • Win11系统下的MindSpore环境搭建
  • 白话理解和使用DOCKER VOLUME
  • Docker 必知必会4----容器之间的通信
  • Docker 必知必会3----使用自己制作的镜像
  • 对于Docker和Podman的一点使用经验

    • 本站QQ群：前端 618073944 | Java 606181507 | Python 626812652 | C/C++ 612253063 | 微信 634508462 | 苹果 692586424 | C#/.net 182808419 | PHP 305140648 | 运维 608723728

    W3xue 的所有内容仅供测试，对任何法律问题及风险不承担任何责任。通过使用本站内容随之而来的风险与本站无关。
    关于我们  |  意见建议  |  捐助我们  |  报错有奖  |  广告合作、友情链接（目前9元/月）请联系QQ：27243702 沸活量
    皖ICP备17017327号-2　皖公网安备34020702000426号