Docker 网络（八）——配置自定义的网桥

8 配置自定义的网桥

关闭Docker进程，删除默认网桥 docker0，创建新的网桥 testbri

ubuntu@ubuntu:~$ sudo service docker stop
docker stop/waiting
ubuntu@ubuntu:~$ sudo ip link set docker0 down
ubuntu@ubuntu:~$ sudo brctl delbr docker0
ubuntu@ubuntu:~$ sudo brctl addbr testbri
ubuntu@ubuntu:~$ sudo ip link set testbri up
ubuntu@ubuntu:~$ sudo ip addr add 10.0.0.1/24 dev testbri

编辑Docker配置文件

ubuntu@ubuntu:~$ sudo su
root@ubuntu:/home/ubuntu# echo 'DOCKER_OPTS="-b=testbri"' >> /etc/default/docker
root@ubuntu:/home/ubuntu# service docker restart

查看刚创建的网桥

ubuntu@ubuntu:~$ ip -d link show testbri
85: testbri: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN mode DEFAULT group default 
    link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff promiscuity 0 
    bridge 

启动一个容器，查看网络和IP

ubuntu@ubuntu:~$ docker run -it --rm ubuntu:14.04 bash
root@fafd08732c27:/# ip a show eth0
86: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default 
    link/ether 02:42:0a:00:00:02 brd ff:ff:ff:ff:ff:ff
    inet 10.0.0.2/24 scope global eth0
       valid_lft forever preferred_lft forever
    inet6 fe80::42:aff:fe00:2/64 scope link 
       valid_lft forever preferred_lft forever
root@fafd08732c27:/# ping 10.0.0.1
PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data.
64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.167 ms

自动配置NAT

ubuntu@ubuntu:~$ sudo iptables -t nat -L
Chain POSTROUTING (policy ACCEPT)
target     prot opt source               destination         
MASQUERADE  all  --  10.0.0.0/24          anywhere            
MASQUERADE  all  --  172.17.0.0/16        anywhere     

恢复默认docker0

ubuntu@ubuntu:~$ sudo service docker stop
ubuntu@ubuntu:~$ sudo ip link set testbri down
ubuntu@ubuntu:~$ sudo brctl delbr testbri
ubuntu@ubuntu:~$ sudo brctl addbr docker0
ubuntu@ubuntu:~$ sudo vim /etc/default/docker  删除最后一行
ubuntu@ubuntu:~$ sudo service docker start
docker start/running, process 11724