docke自定义网络之容器互联

2024-04-02 19:04:59 365人浏览泡泡鱼

摘要

目录前言–link自定义网络提问前言在前几期我们介绍了容器间的互联可以使用 –Link 参数进行设置，这样可以在容器内不只访问ip，也可以访问对应设置的域名。先温习下。操作之前

前言

在前几期我们介绍了容器间的互联可以使用 –Link 参数进行设置，这样可以在容器内不只访问ip，也可以访问对应设置的域名。先温习下。操作之前先清除所有的容器。

–link


# 清除所有容器
$root@VM-8-11-ubuntu:~# Docker stop $(docker ps -aq) && docker rm $(docker ps -aq)
88f8f241ca30
765ed1889bfa

$root@VM-8-11-ubuntu:~# docker run -it --name=mybusy02 -d busybox
82aff31e56f3913b3fa883a08ec95960eff88fc9977360a67264c0d53180844b
$root@VM-8-11-ubuntu:~# docker run -it --name mybusy --link mybusy02:mybusy-net -d busybox
b77e9762314f868518f799d3c572dec0b2ce13a684de072fb9f9e925135f6459

$root@VM-8-11-ubuntu:~# docker exec -it mybusy ping mybusy-net
PING mybusy-net (172.17.0.2): 56 data bytes
64 bytes from 172.17.0.2: seq=0 ttl=64 time=0.131 ms
64 bytes from 172.17.0.2: seq=1 ttl=64 time=0.069 ms
64 bytes from 172.17.0.2: seq=2 ttl=64 time=0.069 ms

$root@VM-8-11-ubuntu:~# docker exec -it mybusy cat /etc/hosts
127.0.0.1	localhost
::1	localhost ip6-localhost ip6-loopback
fe00::0	ip6-localnet
ff00::0	ip6-mcastprefix
ff02::1	ip6-allnodes
ff02::2	ip6-allrouters
172.17.0.2	mybusy-net 09a4b97fc09d mybusy02    # 我们发现在hosts文件中加入了mybusy02
172.17.0.3	c73be07d21fb

我们发现是互联了，但是如果mybusy02 想ping 通 mybusy 还需要一个–link。所以就很麻烦，而且官方也推荐我们不要使用 --link 这个参数了。

docker 0 不支持容器名访问接下来我们就到了今天的重头戏，自定义网络了。

在这里插入图片描述

自定义网络


# 主要涉及到的命令
$root@VM-8-11-ubuntu:~# docker network --help

Usage:  docker network COMMAND

Manage networks

Commands:
  connect     Connect a container to a network
  create      Create a network
  disconnect  Disconnect a container from a network
  inspect     Display detailed infORMation on one or more networks
  ls          List networks
  prune       Remove all unused networks
  rm          Remove one or more networks

Run 'docker network COMMAND --help' for more information on a command.
# 这是默认的网络方式 brudge 就是docker 0的网桥
$root@VM-8-11-ubuntu:~# docker network ls
NETWORK ID     NAME      DRIVER    SCOPE
cf05ea05d3bd   bridge    bridge    local
0ab28e475dc6   host      host      local
e4c628cc77db   none      null      local

我们来使用create来创建自己的网桥网络。基础


# --driver 设置network类型  --subnet 设置子网  /16 = 255*255 个ip 减去0.0 和 255.255 约等于65535
$root@VM-8-11-ubuntu:~# docker network create --driver=bridge --subnet=192.168.0.0/16 my-net
1b668a5439b207d2080d95bffe829139cfa2456d691c8019a245e7f9d5a56970
root@VM-8-11-ubuntu:~# docker network ls
NETWORK ID     NAME      DRIVER    SCOPE
cf05ea05d3bd   bridge    bridge    local
0ab28e475dc6   host      host      local
1b668a5439b2   my-net    bridge    local
e4c628cc77db   none      null      local

# 查看网络信息
$root@VM-8-11-ubuntu:~# docker network inspect my-net
[
    {
        "Name": "my-net",
        "Id": "1b668a5439b207d2080d95bffe829139cfa2456d691c8019a245e7f9d5a56970",
        "Created": "2021-12-01T09:47:21.410882291+08:00",
        "Scope": "local",
        "Driver": "bridge",
        "EnableIPv6": false,
        "IPAM": {
            "Driver": "default",
            "Options": {},
            "Config": [
                {
                    "Subnet": "192.168.0.0/16"
                }
            ]
        },
        "Internal": false,
        "Attachable": false,
        "Ingress": false,
        "ConfigFrom": {
            "Network": ""
        },
        "ConfiGonly": false,
        "Containers": {},
        "Options": {},
        "Labels": {}
    }
]

上面我们介绍了创建网络的方法以及查看的方法接下来看看使用的方法


# 创建mybusy 容器设置 my-net网络
$root@VM-8-11-ubuntu:~# docker run -it --name mybusy --net=my-net -d busybox
180fbc8b04627762a896d8a85d8cb67063c01a0f3ad8a11352ab4695b022c272
# 创建mybusy02 容器设置 my-net网络 
$root@VM-8-11-ubuntu:~# docker run -it --name mybusy02 --net=my-net -d busybox
3c08d592537a9593c960c9664b4724521658f26be7b658a6483e6fbfe30b58a7
# 在容器mybusy ping mybusy02 通了
$root@VM-8-11-ubuntu:~# docker exec -it mybusy ping mybusy02
PING mybusy02 (192.168.0.3): 56 data bytes
64 bytes from 192.168.0.3: seq=0 ttl=64 time=0.110 ms
64 bytes from 192.168.0.3: seq=1 ttl=64 time=0.070 ms

这时我们发现他们两互相ping通了，这就很完美了。再来看看下面的 my-net 的网络配置


root@VM-8-11-ubuntu:~# docker network inspect my-net 
[
    {
        "Name": "my-net",
        "Id": "1b668a5439b207d2080d95bffe829139cfa2456d691c8019a245e7f9d5a56970",
        "Created": "2021-12-01T09:47:21.410882291+08:00",
        "Scope": "local",
        "Driver": "bridge",
        "EnableIPv6": false,
        "IPAM": {
            "Driver": "default",
            "Options": {},
            "Config": [
                {
                    "Subnet": "192.168.0.0/16"
                }
            ]
        },
        "Internal": false,
        "Attachable": false,
        "Ingress": false,
        "ConfigFrom": {
            "Network": ""
        },
        "ConfigOnly": false,
        "Containers": {   # 这时我们发现 这两个容器已经加入到这个网络中了
            "180fbc8b04627762a896d8a85d8cb67063c01a0f3ad8a11352ab4695b022c272": {
                "Name": "mybusy",
                "EndpointID": "12929182af47e619e3405cab9981ea1671a2bc31f77d3aa589ebcf2c912c12bc",
                "MacAddress": "02:42:c0:a8:00:02",
                "IPv4Address": "192.168.0.2/16",
                "IPv6Address": ""
            },
            "3c08d592537a9593c960c9664b4724521658f26be7b658a6483e6fbfe30b58a7": {
                "Name": "mybusy02",
                "EndpointID": "61b08372535d751cee726fc01d4e300390e2a090dba20f1d21ba96385a7a621e",
                "MacAddress": "02:42:c0:a8:00:03",
                "IPv4Address": "192.168.0.3/16",
                "IPv6Address": ""
            }
        },
        "Options": {},
        "Labels": {}
    }
]

提问

在不同网络的配置下的容器可以互联吗？

答案是可以的。我们可以使用 docker network connect 指令，以下为操作步骤


# 首先查看当前存在同一个网络中mybusy mybusy02 两个容器
$root@VM-8-11-ubuntu:~# docker ps -a
CONTAINER ID   IMAGE     COMMAND   CREATED         STATUS         PORTS     NAMES
3c08d592537a   busybox   "sh"      8 minutes ago   Up 8 minutes             mybusy02
180fbc8b0462   busybox   "sh"      8 minutes ago   Up 8 minutes             mybusy
# 创建一个在默认网络中的 mybusy03
$root@VM-8-11-ubuntu:~# docker run -it --name mybusy03  -d busybox
a95b57c96f400ed44efffcc938bccce15830fa1ab5b55716261e4588c14429cb
# 查看当前的容器
$root@VM-8-11-ubuntu:~# docker ps 
CONTAINER ID   IMAGE     COMMAND   CREATED          STATUS          PORTS     NAMES
a95b57c96f40   busybox   "sh"      21 seconds ago   Up 21 seconds             mybusy03
3c08d592537a   busybox   "sh"      8 minutes ago    Up 8 minutes              mybusy02
180fbc8b0462   busybox   "sh"      9 minutes ago    Up 9 minutes              mybusy
# 尝试从 mybusy ping mybusy03 发现是ping 不通的 因为不在同一网端中
$root@VM-8-11-ubuntu:~# docker exec -it mybusy ping mybusy03
ping: bad address 'mybusy03'
# 这时我们查看docker network connect --help 命令查看
$root@VM-8-11-ubuntu:~# docker network connect --help

Usage:  docker network connect [OPTIONS] NETWORK CONTAINER

Connect a container to a network

Options:
      --alias strings           Add network-scoped alias for the container
      --driver-opt strings      driver options for the network
      --ip string               IPv4 address (e.g., 172.30.100.104)
      --ip6 string              IPv6 address (e.g., 2001:db8::33)
      --link list               Add link to another container
      --link-local-ip strings   Add a link-local address for the container
# 将mybusy03 加入到 my-net 网络中
$root@VM-8-11-ubuntu:~# docker network connect my-net mybusy03
# 这时我们再 ping 发现通了。是不是很神奇
$root@VM-8-11-ubuntu:~# docker exec -it mybusy ping mybusy03
PING mybusy03 (192.168.0.4): 56 data bytes
64 bytes from 192.168.0.4: seq=0 ttl=64 time=0.197 ms
64 bytes from 192.168.0.4: seq=1 ttl=64 time=0.087 ms

这时我们查看网络发现 mybusy03 已经加入到 my-net中去了。所以就可以ping 通了。

在这里插入图片描述