了解 Docker 网络类型

Welcome to Docker networking! Containers need to talk to each other and the outside world. Docker networks make this possible.

Understanding network types is key to building robust and scalable applications. Let's dive in!

When you first install Docker, it creates a default bridge network named bridge. Unless specified, all new containers connect to this network.

• Containers on the same default bridge can communicate via IP address.
• They are isolated from the host machine's network.

You can see the default bridge network and its details using Docker commands. Try running these:

While the default bridge works, custom bridge networks offer significant advantages:

• Isolation: Better segmentation for different applications.
• DNS Resolution: Containers can communicate by name, not just IP.
• Portability: Easier to manage complex setups.

Let's create our own custom bridge network. This network will be isolated and provide DNS resolution for containers connected to it.

Now, let's run two containers on our my-custom-app-net and see them talk to each other using their names. This is a huge benefit!

The host network driver is different. It removes network isolation between the container and the Docker host.

A container using the host network shares the host's network stack directly. This means:

• No port mapping is needed.
• The container uses the host's IP address.

The host network can be useful for specific scenarios:

• Performance: Minimizes networking overhead.
• Monitoring: Accessing host-level network interfaces directly.

However, it reduces isolation and can lead to port conflicts if not managed carefully.

When you start dealing with multiple Docker hosts (machines), you need a way for containers on different hosts to communicate. This is where overlay networks come in.

Overlay networks are crucial for Docker Swarm, allowing services to communicate seamlessly across an entire cluster.

Overlay networks provide:

• Multi-host communication: Containers on different physical machines can talk.
• Service Discovery: Integrated DNS for services across the swarm.
• Load Balancing: Distributes traffic among service replicas.

They abstract away the underlying physical network complexity.

Test your knowledge of Docker network types!

Great job! You've learned about the main Docker network types:

• Bridge (Default & Custom): For single-host container communication. Custom bridges add isolation and DNS.
• Host: For containers that need direct access to the host's network stack.
• Overlay: For multi-host container communication in a Docker Swarm.

Choosing the right network type is vital for your application's architecture. Next, we'll learn how to configure them!