一、Docker四种网络模式

1. 第一种网络模式host
   host模式: 使用--net=host指定docker使用的网络实际上和宿主机一样,在容器内看到的网卡ip是宿主机上的ip.

bash-3.2# docker run -it --rm --name network_host --net=host new_centos:01 bash
### --rm: 退出后删除该容器
### 宿主机执行ifconfig 与 容器执行ifconfig后进行ip对比,得到容器里的ip信息和宿主机的ip信息一样
bash-3.2 /# ifconfig
br0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500inet 192.168.1.40  netmask 255.255.255.0  broadcast 192.168.1.255inet6 fe80::be5f:f4ff:fe5e:4aad  prefixlen 64  scopeid 0x20<link>ether bc:5f:f4:5e:4a:ad  txqueuelen 0  (Ethernet)RX packets 274360905  bytes 286715259393 (267.0 GiB)RX errors 0  dropped 0  overruns 0  frame 0TX packets 136254081  bytes 11227340887 (10.4 GiB)TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
…………………………………………………………………………………………………………………………………………………………………………………………
…………………………………………………………………………………………………………………………………………………………………………………………
…………………………………………………………………………………………………………………………………………………………………………………………
vethe82752b: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500inet6 fe80::d496:d3ff:feb0:3c93  prefixlen 64  scopeid 0x20<link>ether d6:96:d3:b0:3c:93  txqueuelen 0  (Ethernet)RX packets 7  bytes 558 (558.0 B)RX errors 0  dropped 0  overruns 0  frame 0TX packets 117  bytes 9042 (8.8 KiB)TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

1. 第二种网络模式container
   container模式: 使用--net=container:container_id/container_name多个容器使用共同的网络,看到的ip是一样的.

bash-3.2# docker exec -it 1e4cf0c7b5dc bash     #进入任意一个容器
1e4cf0c7b5dc# yum -y install net-tools      #安装ifconfig命令
1e4cf0c7b5dc#  ifconfig |grep -A1 "eth0"
eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500inet 172.17.0.19  netmask 255.255.0.0  broadcast 0.0.0.0
bash-3.2# docker run -it --rm --name network_container --net=container:dced5597366d new_centos:01 bash
dced5597366d# ifconfig |grep -A1 "eth0"
eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500inet 172.17.0.19  netmask 255.255.0.0  broadcast 0.0.0.0
### 可以看到,两个容器id、ip都一样.

1. 第三种网络模式none
   none模式: 使用--net=none, 这种模式下,不会配置任何网络

bash-3.2# docker run -it --rm --name network_none --net=none new_centos:01 bash
c3af5c1d7616# ifconfig |grep -E 'eth0|lo'
lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536loop  txqueuelen 0  (Local Loopback)
c3af5c1d7616# ping baidu.com
ping: unknown host baidu.com
### 该模式创建容器后是没有网络的      

1. 第四种网络模式bridge
   bridge模式: 使用--net=bridge.创建完容器默认为这种网络模式.类似与vmware的nat网络模式.

二、外部访问容器

1. 进入容器,安装httpd服务

bash-3.2# docker exec -it 8e25 bash
8e2547638bb3# yum -y install httpd
8e2547638bb3# /usr/sbin/httpd       #启动http服务
8e2547638bb3# lsof -i:80
COMMAND PID USER   FD   TYPE  DEVICE SIZE/OFF NODE NAME
httpd   124 root    4u  IPv6 5118010      0t0  TCP *:http (LISTEN)

1. 把该容器保存为镜像

bash-3.2# docker commit -m "centos_with_httpd" -a "90root" 8e2547638bb3 centos_with_httpd:v1      #容器保存为镜像
bash-3.2# docker images         #查看镜像
REPOSITORY                  TAG                 IMAGE ID            CREATED             VIRTUAL SIZE
centos_with_httpd           v1                  aa7cc183e588        18 seconds ago      366.6 MB
bash-3.2#  docker run -itd -p 5123:80 centos_with_httpd:v1 bash       #将容器的80端口映射到宿主机的5123端口
bash-3.2# docker exec -it 23ecd12c7a10 bash     #进入容器
23ecd12c7a10# /usr/sbin/httpd           #启动http
23ecd12c7a10# echo "www.90root.com" > /var/www/html/1.html
23ecd12c7a10# curl 127.0.0.1/1.html
www.90root.com
bash-3.2# curl 192.168.1.40:5123/1.html
www.90root.com
### 后者浏览器访问192.168.1.40:5123/1.html

三、容器互联

1. 安装mysql镜像

bash-3.2# docker run -itd centos-6-x86_minimal bash            #创建容器
bash-3.2# docker exec -it 94b61b9ad0e9 bash
94b61b9ad0e9# yum -y install mysql-server
94b61b9ad0e9# /etc/init.d/mysqld start

1. 把mysql容器保存为镜像

bash-3.2# docker commit -m "centos_6_with_mysql" -a "90root" 94b61b9ad0e9 centos6_mysql:v1
bash-3.2# docker images
REPOSITORY                            TAG                 IMAGE ID            CREATED             VIRTUAL SIZE
centos6_mysql                         v1                  0cc0a9a0001a        8 seconds ago       457.1 MB

1. 以centos6_mysql、centos_with_httpd镜像分别创建两个容器并端口映射

bash-3.2# docker run -itd -p 13306:3306 --name centos6_mysql centos6_mysql:v1 bash     #创建mysql容器.
bash-3.2# docker exec -it centos6_mysql bash
8606d161d004# /etc/init.d/mysqld start      #启动mysql
bash-3.2# docker run -itd -p 10080:80 --name centos6_web --link centos6_mysql:db centos_with_httpd:v1 bash       #创建web容器. --link 容器名:别名
bash-3.2# docker exec -it centos6_web bash
08bd05fd9517# telnet db 3306
Trying 172.17.0.23...
Connected to db.
Escape character is '^]'.
DHost '172.17.0.24' is not allowed to connect to this MySQL serverConnection closed by foreign host.
08bd05fd9517# cat /etc/hosts
172.17.0.23 db 8606d161d004 centos6_mysql

四、配置网桥(centos6)

为了使本地网络中的机器和Docker容器更方便的通信,我们经常会将Docker容器配置到和主机同一网段的需求… 我们只需要将Docker容器和宿主机的网卡桥接起来,再给Docker容器配上IP即可.

1. 宿主机配置桥接网卡

bash-3.2# cd /etc/sysconfig/network-scripts/
bash-3.2# cp ifcfg-eth0 ifcfg-br0
bash-3.2# vim ifcfg-eth0
DEVICE=eth0
HWADDR=BC:5F:F4:5E:4A:AD
TYPE=Ethernet
UUID=b64d5263-4f16-453b-9971-ab052f101c9e
ONBOOT=yes
NM_CONTROLLED=yes
#BOOTPROTO=static
#IPADDR=192.168.1.40
#NETMASK=255.255.255.0
#GATEWAY=192.168.1.254
#DNS1=192.168.1.254
#DNS2=114.114.114.114
BRIDGE=br0
bash-3.2# vim ifcfg-br0
DEVICE=br0
TYPE=Bridge
ONBOOT=yes
BOOTPROTO=static
IPADDR=192.168.1.40
NETMASK=255.255.255.0
GATEWAY=192.168.1.254
DNS1=192.168.1.254
DNS2=114.114.114.114
MTU=1500
bash-3.2# /etc/init.d/network restart

1. 安装pipework

bash-3.2# git clone https://github.com/jpetazzo/pipework
bash-3.2# cp pipework/pipework /usr/local/bin/

1. 使用桥接pipework创建一个新容器

bash-3.2# docker run -itd --net=none --name 90root_pipework centos_with_httpd:v1 bash
bash-3.2# rpm -Uvh https://repos.fedorapeople.org/openstack/EOL/openstack-grizzly/epel-6/iproute-2.6.32-130.el6ost.netns.2.x86_64.rpm
bash-3.2# pipework br0 90root_pipework 192.168.1.54/24
bash-3.2# docker exec -it 90root_pipework bash
ac16957506cc# ifconfig |grep -A1 "eth1"
eth1      Link encap:Ethernet  HWaddr 9A:C6:E8:5E:8C:B8inet addr:192.168.1.54  Bcast:192.168.1.255  Mask:255.255.255.0
### ping通外网即可.