自定义Docker网络
作者：尹正杰
版权声明：原创作品，谢绝转载！否则将追究法律责任。
一.docker管理网络的命令
1>.查看docker network的帮助信息
[root@docker102.yinzhengjie.org.cn ~]# docker network --help Usage: docker network COMMAND Manage networks Commands: connect Connect a container to a network create Create a network disconnect Disconnect a container from a network inspect Display detailed information on one or more networks ls List networks prune Remove all unused networks rm Remove one or more networks Run ‘docker network COMMAND --help‘ for more information on a command. [root@docker102.yinzhengjie.org.cn ~]#
2>.查看已经存在的网卡信息
[root@docker102.yinzhengjie.org.cn ~]# docker network ls NETWORK ID NAME DRIVER SCOPE 34d7483acce3 bridge bridge local 37f2cd930d53 host host local 4089feeb2359 none null local [root@docker102.yinzhengjie.org.cn ~]# [root@docker102.yinzhengjie.org.cn ~]#
3>.查看创建网卡命令的帮助信息
[root@docker102.yinzhengjie.org.cn ~]# docker network create --help Usage: docker network create [OPTIONS] NETWORK Create a network Options: --attachable Enable manual container attachment --aux-address map Auxiliary IPv4 or IPv6 addresses used by Network driver (default map[]) --config-from string The network from which copying the configuration --config-only Create a configuration only network -d, --driver string Driver to manage the Network (default "bridge") --gateway strings IPv4 or IPv6 Gateway for the master subnet --ingress Create swarm routing-mesh network --internal Restrict external access to the network --ip-range strings Allocate container ip from a sub-range --ipam-driver string IP Address Management Driver (default "default") --ipam-opt map Set IPAM driver specific options (default map[]) --ipv6 Enable IPv6 networking --label list Set metadata on a network -o, --opt map Set driver specific options (default map[]) --scope string Control the network‘s scope --subnet strings Subnet in CIDR format that represents a network segment [root@docker102.yinzhengjie.org.cn ~]# [root@docker102.yinzhengjie.org.cn ~]#
二.自定义docker案例
1>.创建一个bridge模式的网络
[root@docker102.yinzhengjie.org.cn ~]# docker network ls NETWORK ID NAME DRIVER SCOPE 34d7483acce3 bridge bridge local 37f2cd930d53 host host local 4089feeb2359 none null local [root@docker102.yinzhengjie.org.cn ~]# [root@docker102.yinzhengjie.org.cn ~]# [root@docker102.yinzhengjie.org.cn ~]# docker network create -d bridge --subnet 10.30.1.0/24 --gateway 10.30.1.254 yinzhengjie-net ec32b69e252b7d84a87436f1bb6ae33e2711b98f952df0ad2dd7289a34645827 [root@docker102.yinzhengjie.org.cn ~]# [root@docker102.yinzhengjie.org.cn ~]# docker network ls NETWORK ID NAME DRIVER SCOPE 34d7483acce3 bridge bridge local 37f2cd930d53 host host local 4089feeb2359 none null local ec32b69e252b yinzhengjie-net bridge local [root@docker102.yinzhengjie.org.cn ~]# [root@docker102.yinzhengjie.org.cn ~]#
2>.基于咱们上一步自定义的网络启动一个容器并验证是否可以正常访问互联网
[root@docker102.yinzhengjie.org.cn ~]# docker network ls NETWORK ID NAME DRIVER SCOPE 34d7483acce3 bridge bridge local 37f2cd930d53 host host local 4089feeb2359 none null local ec32b69e252b yinzhengjie-net bridge local [root@docker102.yinzhengjie.org.cn ~]# [root@docker102.yinzhengjie.org.cn ~]# [root@docker102.yinzhengjie.org.cn ~]# docker container run -it --network yinzhengjie-net --name myCentOS centos:centos7.6.1810 bash [root@e56d37aa51a9 /]# [root@e56d37aa51a9 /]# yum -y install net-tools [root@e56d37aa51a9 /]# [root@e56d37aa51a9 /]# ifconfig eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet 10.30.1.1 netmask 255.255.255.0 broadcast 10.30.1.255 ether 02:42:0a:1e:01:01 txqueuelen 0 (Ethernet) RX packets 2665 bytes 13320309 (12.7 MiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 2425 bytes 133997 (130.8 KiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536 inet 127.0.0.1 netmask 255.0.0.0 loop txqueuelen 1000 (Local Loopback) RX packets 66 bytes 5790 (5.6 KiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 66 bytes 5790 (5.6 KiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 [root@e56d37aa51a9 /]# [root@e56d37aa51a9 /]# route -n Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 0.0.0.0 10.30.1.254 0.0.0.0 UG 0 0 0 eth0 10.30.1.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0 [root@e56d37aa51a9 /]# [root@e56d37aa51a9 /]# ping www.baidu.com PING www.a.shifen.com (111.206.223.173) 56(84) bytes of data. 64 bytes from 111.206.223.173 (111.206.223.173): icmp_seq=1 ttl=127 time=7.03 ms 64 bytes from 111.206.223.173 (111.206.223.173): icmp_seq=2 ttl=127 time=6.14 ms 64 bytes from 111.206.223.173 (111.206.223.173): icmp_seq=3 ttl=127 time=6.83 ms ^C --- www.a.shifen.com ping statistics --- 3 packets transmitted, 3 received, 0% packet loss, time 2004ms rtt min/avg/max/mdev = 6.140/6.670/7.034/0.383 ms [root@e56d37aa51a9 /]# [root@e56d37aa51a9 /]#
3>.
4>.
5>.
原文：https://www.cnblogs.com/yinzhengjie/p/12249064.html