Docker Networking

eth0

vethxxxx

vethyyyy

eth0

bridge

docker host

Sandbox

  • container network configurations
interfaces
dns
routing table

libnetwork
network namespace
network partition
linux
windows

CNM

sandbox
endpoint
endpoint
veth pair
virtual
 NICs
linux
windows

endpoint

networks
bridge
vswitch
linux
windows

network

namespace
eth0
vethxxx
overlay
app
libnetwork
driver (e.g. overlay)
docker engine

bridge

stack1

stack2

bridge1

stack1

stack2

bridge2

host

front tier

back tier

back tier

multi host networking

Src: The Container Network Model by libnetwork project by Docker . Released under Apache  2.0 License https://github.com/docker/libnetwork/blob/master/docs/design.md

CNM

  1. Sandbox
  2. Endpoint
  3. Network
ingress
docker_gwbridge
docker_gwbridge
docker_gwbridge
ingress
docker_gwbridge
ingress-sbox
eth0
eth1
vethxx
vethyy
vx-001000-pqr
ov-001000-pqr
vxlan
bridge
veth pair
docker_gwbridge
swarm default networking on a host
ingress
ingress
docker_gwbridge
ingress-sbox
ov-001000-pqr
docker_gwbridge
container_sbox
ov-001002-lmn
vote overlay
eth0
eth1
user defined overlay network
redis
ov-001002-lmn
vote overlay n/w
redis
ov-001002-lmn
worker
vxlan
vxlan
services in overlay network
redis
vote overlay n/w
redis
worker
services in overlay network simplified


c1
c2
c3
task1.redis
services
c1
c2
c3
task2.redis
task3.redis
redis
10.0.0.5
10.0.0.12
10.0.0.8
10.0.0.15
vip
10.0.0.15
10.0.0.5
10.0.0.8
10.0.0.12
task3.redis
task2.redis
task1.redis
redis
swarm dns
scenario :  worker wants to discover redis and connect to it
redis
worker
c1
c2
c3
redis2
vote overlay n/w
redis1
worker
services in overlay network simplified


dockerd
dns
127.0.0.11
resolve
  1. resolve request
  2. dns => vip resolution
  3. iptables (mangle)
  4. ipvs
  5. overlay
iptables
ipvs
worker
dockerd
dns
127.0.0.11
resolve
  1. resolve request
  2. dns => vip resolution
  3. iptables (mangle)
  4. ipvs
  5. overlay
iptables
ipvs
redis2
vote overlay n/w
redis1
worker
dockerd
dns
  1. resolve request
  2. dns => vip resolution
  3. iptables (mangle)
  4. ipvs
  5. overlay
iptables
ipvs
Internal Service Discovery /LB
redis2
ingress overlay n/w
redis1
ingress-sbox
External Service Discovery /LB
dockerd
dns
  1. host:port
  2. iptables,  
  3. ingress-sbox, iptables
  4. ipvs
  5. ingress overlay
  6. iptables port redirect
iptables
ipvs
host1:3000
docker_gwbridge
iptables
iptables redirect
Made with Slides.com