docker自定义网络与网络连通

矫情吗；* 2022-10-28 14:28 151阅读 0赞

### docker自定义网络与网络连通 ###

*   *  docker自定义网络
     *  网络连通

## docker自定义网络 ##

查看所有网络

docker network ls

截图：  
![在这里插入图片描述][20210206221436542.png]  
网络模式：

<table> 
 <thead> 
  <tr> 
   <th>模式</th> 
   <th>描述</th> 
  </tr> 
 </thead> 
 <tbody> 
  <tr> 
   <td>bridge</td> 
   <td>桥接docker（默认），自己创建也用桥接模式</td> 
  </tr> 
  <tr> 
   <td>none</td> 
   <td>不配置网络</td> 
  </tr> 
  <tr> 
   <td>host</td> 
   <td>和宿主机共享网络</td> 
  </tr> 
  <tr> 
   <td>container</td> 
   <td>容器网络连通！（用得少，局限大）</td> 
  </tr> 
 </tbody> 
</table>

测试：

# 我们直接启动的命令 --net bridge ，而这个就是我们的docker0
    docker run -d -p 8003:8080 --name tomcat01 tomcat 
    docker run -d -p 8003:8080 --name --net bridge tomcat01 tomcat 
    
    # docker0特点，默认，域名不能访问，--link可以打通（比较麻烦）
    
    # 我们可以自定义网络
    # --driver bridge 
    # --subnet 192.168.0.0/16 192.168.0.2 192.168.255.255
    # --gateway 192.168.0.1
    docker network create --driver bridge --subnet 192.168.0.0/16 --gateway 192.168.0.1 mynet
    
    
    
    # 查看所有网络
    docker network ls
    NETWORK ID     NAME      DRIVER    SCOPE
    326f1b307a15   bridge    bridge    local
    bbdfc1178b51   host      host      local
    04eb5e8aa466   mynet     bridge    local
    cc581864c464   none      null      local

查看自己的网络

docker network inspect mynet

截图：  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzUyMDY3MA_size_16_color_FFFFFF_t_70]

测试：

[root@izwz94goxqbb9ayvrlpgcaz ~]# docker run -d -P --name tomcat-net-01 --net mynet tomcat
    0b3de9475305fb53e972b139a64cbf91ddbb97b712b0a1e322261509e65b12af
    [root@izwz94goxqbb9ayvrlpgcaz ~]# docker run -d -P --name tomcat-net-02 --net mynet tomcat
    b1aed3b45e7b9c4b8cb32f9e345783dde40eba5803a71e5f0f00c16d0ba21240
    [root@izwz94goxqbb9ayvrlpgcaz ~]# docker network inspect mynet
    [
        { 
            "Name": "mynet",
            "Id": "04eb5e8aa466dc4cfd9bcac0673dafb2eda41287545abe4900546deb76aeac72",
            "Created": "2021-02-06T22:30:32.576364411+08:00",
            "Scope": "local",
            "Driver": "bridge",
            "EnableIPv6": false,
            "IPAM": { 
                "Driver": "default",
                "Options": { },
                "Config": [
                    { 
                        "Subnet": "192.168.0.0/16",
                        "Gateway": "192.168.0.1"
                    }
                ]
            },
            "Internal": false,
            "Attachable": false,
            "Ingress": false,
            "ConfigFrom": { 
                "Network": ""
            },
            "ConfigOnly": false,
            "Containers": { 
                "0b3de9475305fb53e972b139a64cbf91ddbb97b712b0a1e322261509e65b12af": { 
                    "Name": "tomcat-net-01",
                    "EndpointID": "69905b3fdd1950c567db96da806d6be936f89dae4f8f537302298cece9e72d38",
                    "MacAddress": "02:42:c0:a8:00:02",
                    "IPv4Address": "192.168.0.2/16",
                    "IPv6Address": ""
                },
                "b1aed3b45e7b9c4b8cb32f9e345783dde40eba5803a71e5f0f00c16d0ba21240": { 
                    "Name": "tomcat-net-02",
                    "EndpointID": "1b540ed1dcf4968c81b6ef20be0769ca91cd7504141caf02aa9a040ecdd0897c",
                    "MacAddress": "02:42:c0:a8:00:03",
                    "IPv4Address": "192.168.0.3/16",
                    "IPv6Address": ""
                }
            },
            "Options": { },
            "Labels": { }
        }
    ]
    
    # 再测试pingip
    [root@izwz94goxqbb9ayvrlpgcaz ~]# docker exec -it tomcat-net-01 ping 192.168.0.3
    PING 192.168.0.3 (192.168.0.3) 56(84) bytes of data.
    64 bytes from 192.168.0.3: icmp_seq=1 ttl=64 time=0.107 ms
    64 bytes from 192.168.0.3: icmp_seq=2 ttl=64 time=0.063 ms
    64 bytes from 192.168.0.3: icmp_seq=3 ttl=64 time=0.066 ms
    ^C
    --- 192.168.0.3 ping statistics ---
    3 packets transmitted, 3 received, 0% packet loss, time 5ms
    rtt min/avg/max/mdev = 0.063/0.078/0.107/0.022 ms
    
    # 现在不用--link也可以ping名字了
    [root@izwz94goxqbb9ayvrlpgcaz ~]# docker exec -it tomcat-net-01 ping tomcat-net-02
    PING tomcat-net-02 (192.168.0.3) 56(84) bytes of data.
    64 bytes from tomcat-net-02.mynet (192.168.0.3): icmp_seq=1 ttl=64 time=0.052 ms
    64 bytes from tomcat-net-02.mynet (192.168.0.3): icmp_seq=2 ttl=64 time=0.050 ms
    64 bytes from tomcat-net-02.mynet (192.168.0.3): icmp_seq=3 ttl=64 time=0.050 ms
    64 bytes from tomcat-net-02.mynet (192.168.0.3): icmp_seq=4 ttl=64 time=0.052 ms
    64 bytes from tomcat-net-02.mynet (192.168.0.3): icmp_seq=5 ttl=64 time=0.056 ms
    64 bytes from tomcat-net-02.mynet (192.168.0.3): icmp_seq=6 ttl=64 time=0.057 ms
    ^C
    --- tomcat-net-02 ping statistics ---
    6 packets transmitted, 6 received, 0% packet loss, time 25ms
    rtt min/avg/max/mdev = 0.050/0.052/0.057/0.009 ms

我们自定义的网络docker都已经帮我们维护好了对应的关系，推荐我们平时这样使用网络！

好处：  
redis - 不同集群使用不同的网络，保证集群是安全和健康的  
mysql - 不同集群使用不同的网络，保证集群是安全和健康的

## 网络连通 ##

思路：  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzUyMDY3MA_size_16_color_FFFFFF_t_70 1]  
相关命令：  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzUyMDY3MA_size_16_color_FFFFFF_t_70 2]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzUyMDY3MA_size_16_color_FFFFFF_t_70 3]  
测试：

# tomcat 连通mynet
    docker network connect mynet tomcat01
    
    # mynet详细信息
    docker network inspect mynet

连通之后就是将 tomcat01 放到了 mynet 网络下

一个容器两个ip地址 阿里云：公网ip、私网ip  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzUyMDY3MA_size_16_color_FFFFFF_t_70 4]

docker exec -it tomcat01 ping tomcat-net-01

截图：  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzUyMDY3MA_size_16_color_FFFFFF_t_70 5]  
结论：tomcat01打通了mynet，所以tomcat01可以ping通tomcat-net-01.

[20210206221436542.png]: /images/20221024/3b0869c4143a4ab8b7e715ec2109e153.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzUyMDY3MA_size_16_color_FFFFFF_t_70]: /images/20221024/6c9efc213c254ed285d521f608f4cf46.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzUyMDY3MA_size_16_color_FFFFFF_t_70 1]: /images/20221024/7f1beaa2cfc54076b2092d5b5b5de90e.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzUyMDY3MA_size_16_color_FFFFFF_t_70 2]: /images/20221024/9e93e57ef1614975a6d84f23e8f9479c.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzUyMDY3MA_size_16_color_FFFFFF_t_70 3]: /images/20221024/63e0e87168214c6db705bd509155a562.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzUyMDY3MA_size_16_color_FFFFFF_t_70 4]: /images/20221024/e8a22ed644124f309d938f2ff167bf56.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzUyMDY3MA_size_16_color_FFFFFF_t_70 5]: /images/20221024/2873536ce2fc447b9f8ccff4aa10948d.png