docker的四种网络模式

/*

    1. host模式 ：

                        docker run 使用 --net=host指定

        docker使用的网络实际上和宿主机一样

    2. container模式：

                        使用 --net=container:container_id/container_name

        多个容器使用共同的网络，看到的ip是一样的。

    3. none 模式

                        使用 --net=none指定

        这种模式下，不会配置任何网络。

     4. bridge模式

                        使用 --net=bridge指定

        默认模式，不会指定

                此模式会为每个容器分配一个独立的network namespace
*/

/* 外部网络访问容器 ：外部的用户要访问容器，先将容器的ip映射出去，然后客户利用宿主机的ip来访问*/
[root@30c1fec5df6a /]# yum install -y httpd
//虽然报错，但是httpd已经启动
[root@30c1fec5df6a /]# /usr/sbin/httpd
AH00558: httpd: Could not reliably determine the server's fully qualified domain name, using 172.17.0.3. Set the 'ServerName' directive globally to suppress this message
[root@30c1fec5df6a /]# ps aux|grep httpd
root         0.1  0.3    ?        Ss   :   : /usr/sbin/httpd
apache       0.0  0.2    ?        S    :   : /usr/sbin/httpd
apache       0.0  0.2    ?        S    :   : /usr/sbin/httpd
apache       0.0  0.2    ?        S    :   : /usr/sbin/httpd
apache       0.0  0.2    ?        S    :   : /usr/sbin/httpd
apache       0.0  0.2    ?        S    :   : /usr/sbin/httpd
root         0.0  0.0       ?        S+   :   : grep --color=auto httpd

/* ！！！！但对于外部来说，是无法访问容器里的httpd的 */

//先利用容器生成镜像
[root@localhost ~]# docker commit -m "centos_with_httpd" -a "frankie" 30c centos_with_httpd:frankie
fb83cd744da57dba7fb3e5bf861bd0d014da7508b8f47adeb1a3fd4ac01252ed
[root@localhost ~]# docker images
REPOSITORY          TAG                 IMAGE ID            CREATED             VIRTUAL SIZE
centos_with_httpd   frankie             fb83cd744da5         minutes ago       325.8 MB

// -p 可以指定端口映射
[root@localhost ~]# docker run -itd -p : centos_with_httpd:frankie bash
3f043c0dc5b456e53ff040d53d1455cbaa6bedad7d35954be3718a859bea8c24

//进入映射了端口的容器里
[root@localhost ~]# docker exec -it 3f0 bash

//启动httpd服务
[root@3f043c0dc5b4 /]# /usr/sbin/httpd
AH00558: httpd: Could not reliably determine the server's fully qualified domain name, using 172.17.0.12. Set the 'ServerName' directive globally to suppress this message
[root@3f043c0dc5b4 /]# ps aux|grep httpd
root          0.1  0.3    ?        Ss   :   : /usr/sbin/httpd
apache        0.0  0.2    ?        S    :   : /usr/sbin/httpd
apache        0.0  0.2    ?        S    :   : /usr/sbin/httpd
apache        0.0  0.2    ?        S    :   : /usr/sbin/httpd
apache        0.0  0.2    ?        S    :   : /usr/sbin/httpd
apache        0.0  0.2    ?        S    :   : /usr/sbin/httpd
root          0.0  0.0       ?        S+   :   : grep --color=auto httpd

//成功启动httpd，所以可以连接到
[root@3f043c0dc5b4 /]# curl localhost
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN" "http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd"><html><head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
                <title>Apache HTTP Server Test Page powered by CentOS</title>
                <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">

    <!-- Bootstrap -->
    <link href="/noindex/css/bootstrap.min.css" rel="stylesheet">
    <link rel="stylesheet" href="noindex/css/open-sans.css" type="text/css" />

<style type="text/css"><!--
...
...

[root@3f043c0dc5b4 /]# vi /var/www/html/.html
[root@3f043c0dc5b4 /]# curl localhost/.html
frankielinux.com
[root@3f043c0dc5b4 /]# exit

//回到宿主机 ，查看docker的ip
[root@localhost ~]# ifconfig
docker0   Link encap:Ethernet  HWaddr :::4F::
          inet addr:172.17.42.1  Bcast:0.0.0.0  Mask:255.255.0.0
          inet6 addr: fe80::e443:adff:fe6d:3b2/ Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:  Metric:
          RX packets: errors: dropped: overruns: frame:
          TX packets: errors: dropped: overruns: carrier:
          collisions: txqueuelen:
          RX bytes: (469.6 KiB)  TX bytes: (39.1 MiB)

//通过httpd连接，则可以在外部连接容器
[root@localhost ~]# curl 172.17.42.1:/.html
frankielinux.com

//这个容器有端口映射
[root@localhost ~]# docker ps
CONTAINER ID        IMAGE                       COMMAND             CREATED             STATUS              PORTS                  NAMES
3f043c0dc5b4        centos_with_httpd:frankie   "bash"               minutes ago      Up  minutes       0.0.0.0:->/tcp   boring_ardinghelli

/* 容器互联 */
/* 所以可以开启一个新的容器，

 用Centos6的镜像来做一个容器--然后来用yum源来安装MySQL
*/

[root@localhost ~]# docker images
REPOSITORY          TAG                 IMAGE ID            CREATED             VIRTUAL SIZE
centos_with_httpd   frankie             fb83cd744da5        About an hour ago   325.8 MB
centos--x86        latest              c37f3636c1f8         hours ago        343.8 MB
centos_with_net     latest              c5b412fe1c33         hours ago        294.1 MB
centos              latest              d83a55af4e75         weeks ago         196.7 MB
frankie             latest              d83a55af4e75         weeks ago         196.7 MB
registry            latest              ad8da6d14f6d         weeks ago         33.28 MB
[root@localhost ~]# docker run -itd centos--x86 bash
faaa5d792a21f3735e4ade09a9767ab90a54c13b19084a9b004b4dd595615310
[root@localhost ~]# docker exec -it faaa bash
[root@faaa5d792a21 /]# yum install -y mysql-server
Loaded plugins: fastestmirror
Setting up Install Process
base                                                                            | 3.7 kB     :
base/primary_db                                                                 | 4.7 MB     :
extras                                                                          | 3.4 kB     :
extras/primary_db                                                               |   kB     :
[root@faaa5d792a21 /]# /etc/init.d/mysqld start
Initializing MySQL database:  Installing MySQL system tables...
OK
Filling help tables...
OK

[root@faaa5d792a21 /]# netstat -lnp
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address               Foreign Address             State       PID/Program name
tcp               0.0.0.0:                0.0.0.0:*                   LISTEN      -
Active UNIX domain sockets (only servers)
Proto RefCnt Flags       Type       State         I-Node PID/Program name    Path
unix        [ ACC ]     STREAM     LISTENING       -                   /var/lib/mysql/mysql.sock
[root@faaa5d792a21 /]# exit
[root@localhost ~]# docker commit -m "centos_with_mysql" -a "frankie" faaa centos6_with_mysql
5c15987b3c3ac435be66b773410384bd2b17e4ac640876ab0687a931ee1bb0fb
[root@localhost ~]# docker run -itd -p : centos6_with_mysql bash
afbe47d822beccbb74bd379974b9f2507ac56c2c71a176ab41aceaa7b269aed4
[root@localhost ~]# docker ps
CONTAINER ID        IMAGE                       COMMAND             CREATED                                 PORTS                     NAMES
afbe47d822be        centos6_with_mysql          "bash"               seconds ag                            0.0.0.0:->/tcp   ecstatic_sinoussi

[root@localhost ~]# docker run -itd -p : --name web --link ecstatic_sinou                       ssi:db centos_with_httpd:frankie
a21afaa4da5bcb8c6197bf781a6731cfaf28a853a06fe865225a9897f1eb743d
[root@localhost ~]# docker ps
CONTAINER ID        IMAGE                       COMMAND             CREATED                                    STATUS              PORTS                     NAMES
a21afaa4da5b        centos_with_httpd:frankie   "bash"               seconds a                       go      Up  seconds        0.0.0.0:->/tcp     web
[root@localhost ~]# docker exec -it web bash
[root@a21afaa4da5b /]# ping db
PING db (172.17.0.14) () bytes of data.
 bytes from db (172.17.0.14): icmp_seq= ttl= time=22.1 ms
 bytes from db (172.17.0.14): icmp_seq= ttl= time=0.065 ms
^C
--- db ping statistics ---
 packets transmitted,  received, % packet loss, time 1002ms
rtt min/avg/max/mdev = 0.065/11.105/22.146/11.041 ms
[root@a21afaa4da5b /]# cat /etc/hosts
172.17.0.15     a21afaa4da5b
127.0.0.1       localhost
::     localhost ip6-localhost ip6-loopback
fe00:: ip6-localnet
ff00:: ip6-mcastprefix
ff02:: ip6-allnodes
ff02:: ip6-allrouters
172.17.0.14     db afbe47d822be ecstatic_sinoussi