Docker 网络设置

查看容器网络模式
[root@server1 ~]# docker network ls
NETWORK ID NAME DRIVER SCOPE
45583366d5b8 bridge bridge local
b4891344e5d2 host host local
d5fe8e435c74 none null local

获取容器Pid
[root@server1 ~]# docker inspect vm1 | grep Pid
“Pid”: 1304,
“PidMode”: “”,
“PidsLimit”: 0,

容器四种网络模式

默认为桥接模式

bridge模式下容器没有一个公有ip,只有宿主机可以直接访问,外部主机是
不可见的,但容器通过宿主机的NAT规则后可以访问外网。

[root@server1 images]# docker load -i ubuntu.tar 
Loaded image: ubuntu:latest

[root@server1 images]# docker run -it --name vm1 ubuntu
root@cb57ede03f5b:/# ip addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
62: eth0@if63: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default 
    link/ether 02:42:ac:11:00:03 brd ff:ff:ff:ff:ff:ff
    inet 172.17.0.3/16 brd 172.17.255.255 scope global eth0
       valid_lft forever preferred_lft forever
root@cb57ede03f5b:/# [root@server1 images]# brctl show
bridge name	bridge id		STP enabled	interfaces
docker0		8000.0242fffa7ac3	no		veth0af2fd1
							veth41ca9df

host模式

使用和主机相同的IP

[root@server1 images]# docker run -it --name vm2 --net host ubuntu
root@server1:/# ip addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    link/ether 52:54:00:7b:76:8a brd ff:ff:ff:ff:ff:ff
    inet 172.25.76.1/24 brd 172.25.76.255 scope global eth0
       valid_lft forever preferred_lft forever
    inet6 fe80::5054:ff:fe7b:768a/64 scope link 
       valid_lft forever preferred_lft forever
3: docker0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default 
    link/ether 02:42:28:af:13:29 brd ff:ff:ff:ff:ff:ff
    inet 172.17.0.1/16 brd 172.17.255.255 scope global docker0
       valid_lft forever preferred_lft forever
    inet6 fe80::42:28ff:feaf:1329/64 scope link 
       valid_lft forever preferred_lft forever
5: veth96b2747@if4: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master docker0 state UP group default 
    link/ether 12:56:f6:51:bd:ca brd ff:ff:ff:ff:ff:ff
    inet6 fe80::1056:f6ff:fe51:bdca/64 scope link 
       valid_lft forever preferred_lft forever
7: veth040e835@if6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue ma