Docker 通过服务名直接ping通 --link、自定义网络(关键)、网络连通

Docker 通过服务名直接ping通 --link、自定义网络(关键)、网络连通

Docker 容器间通过服务名直接ping通

目录

​​测试​​​​使用 --link​​

​​查看network相关信息​​​​探究inspect​​​​现在已经不建议使用--link了​​

​​自定义网络​​

​​查看network​​​​查看如何创建网络及其参数​​​​创建一个网络net-test​​​​自定义网络的优点​​

​​网络连通​​

测试

$ docker exec -it tomcat02 ping tomcat01ping: tomcat01: Name or service not known-------------------------------------------# 如何解决呢？

使用 --link

$ docker run -d -P --name tomcat03 --link tomcat02 tomcat.baa309a3c4a6cfeb135caae7a1189a18f1671a74722db63ba2da109602586433---------------------------------------------------------------------$ docker exec -it tomcat03 ping tomcat02PING tomcat02 (172.17.0.3) 56(84) bytes of data.64 bytes from tomcat02 (172.17.0.3): icmp_seq=1 ttl=64 time=0.097 ms64 bytes from tomcat02 (172.17.0.3): icmp_seq=2 ttl=64 time=0.087 ms64 bytes from tomcat02 (172.17.0.3): icmp_seq=3 ttl=64 time=0.087 ms^C--- tomcat02 ping statistics ---3 packets transmitted, 3 received, 0% packet loss, time 28msrtt min/avg/max/mdev = 0.087/0.090/0.097/0.009 ms---------------------------------------------------------------------$ docker exec -it tomcat02 ping tomcat03ping: tomcat03: Temporary failure in name resolution

发现使用--link就可以直接使用容器名ping通！容器顺序反之却ping不同

查看network相关信息

$ docker network lsNETWORK ID NAME DRIVER SCOPEea60398194ce bridge bridge local85ad9f57c8bd host host local22e54d43614b none null local---------------------------------------------------------------------$ docker network inspect ea60398194ce[ { "Name": "bridge", "Id": "ea60398194ce0b55f6d244f364042e9c7ead486183c0dbbcc12c94191bf0a90b", "Created": "2020-09-08T17:05:31.148215642+08:00", "Scope": "local", "Driver": "bridge", "EnableIPv6": false, "IPAM": { "Driver": "default", # 默认的docker0 "Options": null, "Config": [ { "Subnet": "172.17.0.0/16", # 最多配置255*255-2个 "Gateway": "172.17.0.1" # 配置的网关 } ] }, "Internal": false, "Attachable": false, "Ingress": false, "ConfigFrom": { "Network": "" }, "ConfigOnly": false, "Containers": { # 下面三个容器的相关配置： "246fb3921ac148352d61a0216e3432b04285d87cd579298b51ac41ac157d1c50": { "Name": "tomcat01", "EndpointID": "7f7178e4c6493cdfcad1c944b851b8dc6720892a8e545c2a43fd47dc48d23b01", "MacAddress": "02:42:ac:11:00:02", "IPv4Address": "172.17.0.2/16", "IPv6Address": "" }, "baa309a3c4a6cfeb135caae7a1189a18f1671a74722db63ba2da109602586433": { "Name": "tomcat03", "EndpointID": "98bf8739c964cbd0e8138dc13aa45248cc8b9bf490c28cb3af0fed517430c1a2", "MacAddress": "02:42:ac:11:00:04", "IPv4Address": "172.17.0.4/16", "IPv6Address": "" }, "c4917215687a203472e900458c148909f63b93d026c9cfb5a90fc5adf5af4f84": { "Name": "tomcat02", "EndpointID": "b795a8848ba753a12135a752d93541d2869a59f91c4f4ca5b752b1954bf3760d", "MacAddress": "02:42:ac:11:00:03", "IPv4Address": "172.17.0.3/16", "IPv6Address": "" } }, "Options": { "com.docker.network.bridge.default_bridge": "true", "com.docker.network.bridge.enable_icc": "true", "com.docker.network.bridge.enable_ip_masquerade": "true", "com.docker.network.bridge.host_binding_ipv4": "0.0.0.0", "com.docker.network.bridge.name": "docker0", "com.docker.network.driver.mtu": "1500" }, "Labels": {} }]elfin@dell:~$

探究inspect

$ docker psCONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMESbaa309a3c4a6 tomcat "catalina.sh run" 17 minutes ago Up 17 minutes 0.0.0.0:32771->8080/tcp tomcat03c4917215687a tomcat "catalina.sh run" 2 hours ago Up 2 hours 0.0.0.0:32770->8080/tcp tomcat02246fb3921ac1 tomcat "catalina.sh run" 3 hours ago Up 3 hours 0.0.0.0:32769->8080/tcp tomcat01

$ docker inspect c4917215687a

tomcat03里面本地配置了tomcat02的配置

$ docker exec -it tomcat03 cat /etc/hosts127.0.0.1 localhost::1 localhost ip6-localhost ip6-loopbackfe00::0 ip6-localnetff00::0 ip6-mcastprefixff02::1 ip6-allnodesff02::2 ip6-allrouters172.17.0.3 tomcat02 c4917215687a172.17.0.4 baa309a3c4a6---------------------------------------------------------------------$ docker exec -it tomcat02 cat /etc/hosts127.0.0.1 localhost::1 localhost ip6-localhost ip6-loopbackfe00::0 ip6-localnetff00::0 ip6-mcastprefixff02::1 ip6-allnodesff02::2 ip6-allrouters172.17.0.3 c4917215687a

现在已经不建议使用--link了

我们推荐使用自定义网络！不使用docker0！ docker0问题：不支持容器名连接访问！

自定义网络

查看所有的docker网络

$ docker network lsNETWORK ID NAME DRIVER SCOPE555e034b8248 bridge bridge local85ad9f57c8bd host host local22e54d43614b none null local

网络模式

查看network

当前环境变更为windows环境

> docker network --helpUsage: docker network COMMANDManage networksCommands: connect Connect a container to a network create Create a network disconnect Disconnect a container from a network inspect Display detailed information on one or more networks ls List networks prune Remove all unused networks rm Remove one or more networksRun 'docker network COMMAND --help' for more information on a command.

以下两个命令是等价的：

# 直接启动时 默认 --net bridge，这个使用的就是docker0网桥> docker run -it -P --name elfin01 ubuntu:18.04> docker run -it -P --name elfin01 --net bridge ubuntu:18.04---------------------------------------------------------------# docker0特点是默认域名不能访问，--link可以打通连接！# 但是--link会有一些问题，建议自定义网络

查看如何创建网络及其参数

> docker network create --helpUsage: docker network create [OPTIONS] NETWORKCreate a networkOptions: --attachable Enable manual container attachment --aux-address map Auxiliary IPv4 or IPv6 addresses used by Network driver (default map[]) --config-from string The network from which copying the configuration --config-only Create a configuration only network -d, --driver string Driver to manage the Network (default "bridge") --gateway strings IPv4 or IPv6 Gateway for the master subnet --ingress Create swarm routing-mesh network --internal Restrict external access to the network --ip-range strings Allocate container ip from a sub-range --ipam-driver string IP Address Management Driver (default "default") --ipam-opt map Set IPAM driver specific options (default map[]) --ipv6 Enable IPv6 networking --label list Set metadata on a network -o, --opt map Set driver specific options (default map[]) --scope string Control the network's scope --subnet strings Subnet in CIDR format that represents a network segment

创建一个网络net-test

使用linux测试

$ docker network create --driver bridge --subnet 192.168.0.0/16 --gateway 192.168.0.1 net-test-------------------------------------------------------------------------------------# --driver bridge 默认就是桥接，可以不写# --subnet 192.168.0.0/16 子网的地址# --gateway 192.168.0.1 网关，路由器地址-------------------------------------------------------------------------------------$ docker network lsNETWORK ID NAME DRIVER SCOPEf15f3323f810 backend bridge localaf0551b97a07 bridge bridge local21fbcd175d02 host host local2c4fe12634cd layoutnet bridge local9f1d4650cc11 net-test bridge localdaccfb2f7ebd none null local-------------------------------------------------------------------------------------$ docker network inspect net-test [ { "Name": "net-test", "Id": "9f1d4650cc11549aee69d1b7521a9c51271865499b265f2295de37cc8622cfdb", "Created": "2020-09-12T14:48:41.414502478+08:00", "Scope": "local", "Driver": "bridge", "EnableIPv6": false, "IPAM": { "Driver": "default", "Options": {}, "Config": [ { "Subnet": "192.168.0.0/16", "Gateway": "192.168.0.1" } ] }, "Internal": false, "Attachable": false, "Ingress": false, "ConfigFrom": { "Network": "" }, "ConfigOnly": false, "Containers": {}, "Options": {}, "Labels": {} }]

查看添加容器后的网络

# 启动两个容器并使用net-test网桥$ docker run -it -P --name ubuntu01 --net net-test ubuntu:18.04root@44afdcf9482d:/# elfin@dell:~$ $ docker run -it -P --name ubuntu02 --net net-test ubuntu:18.04root@8ee354200bdf:/# elfin@dell:~$ $ docker ps CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES8ee354200bdf ubuntu:18.04 "/bin/bash" 13 seconds ago Up 11 seconds ubuntu0244afdcf9482d ubuntu:18.04 "/bin/bash" 44 seconds ago Up 41 seconds ubuntu0111fe3e37d9c3 pdflayout:1.0 "/bin/bash" 4 hours ago Up 2 hours 0.0.0.0:10010-10011->10010-10011/tcp layoutLM4405afaa1d9a mysql:5.7 "docker-entrypoint.s…" 26 hours ago Up About an hour 33060/tcp, 0.0.0.0:13306->3306/tcp mysql57----------------------------------------------------------------------------------$ docker network inspect net-test [ { "Name": "net-test", "Id": "9f1d4650cc11549aee69d1b7521a9c51271865499b265f2295de37cc8622cfdb", "Created": "2020-09-12T14:48:41.414502478+08:00", "Scope": "local", "Driver": "bridge", "EnableIPv6": false, "IPAM": { "Driver": "default", "Options": {}, "Config": [ { "Subnet": "192.168.0.0/16", "Gateway": "192.168.0.1" } ] }, "Internal": false, "Attachable": false, "Ingress": false, "ConfigFrom": { "Network": "" }, "ConfigOnly": false, "Containers": { "44afdcf9482d82a228234054a1bd62edb1f68170289430850af077bea26993aa": { "Name": "ubuntu01", "EndpointID": "e946b840ec2084f9d46f67f9e22dfffa1bea2ec1011c841523f727f54dcf3e3d", "MacAddress": "*************", "IPv4Address": "192.168.0.2/16", "IPv6Address": "" }, "8ee354200bdf82ffd87992a307aa3d19a79b51c36cb5f37c7e21e02591adb43b": { "Name": "ubuntu02", "EndpointID": "7d21a12198596aa0b32df5032c82d1d6426140a81b50817fef524b2e86df3ef5", "MacAddress": "************", "IPv4Address": "192.168.0.3/16", "IPv6Address": "" } }, "Options": {}, "Labels": {} }]----------------------------------------------------------------# 可以发现容器中网络里的Containers字段有相应的显示。只要在这个网桥下的容器，他们之间可以相互访问！

自定义网络的优点

部署集群时，如mysql集群使用同一个网桥，使其能够相互访问；不同集群、应用使用不同的网桥，做网络隔离；有利于集群的健康安全，方便网络管理。

网络连通

清澈的爱，只为中国

版权声明：本文内容由网络用户投稿，版权归原作者所有，本站不拥有其著作权，亦不承担相应法律责任。如果您发现本站中有涉嫌抄袭或描述失实的内容，请联系我们jiasou666@gmail.com 处理，核实后本网站将在24小时内删除侵权内容。