自定義網(wǎng)橋模式實(shí)現(xiàn)跨主機(jī) Docker 通信

概念

不同主機(jī)上的 Docker 容器通過(guò)某些方法可實(shí)現(xiàn)跨主機(jī)通信，但是一般不同主機(jī)上的 Docker 容器內(nèi)的 IP 地址不是處于同一個(gè)網(wǎng)段，但是可以通過(guò)自定義網(wǎng)橋的方式窃躲，將不同主機(jī)的自定義網(wǎng)橋設(shè)定為同一個(gè)網(wǎng)段，并橋接主機(jī)上的網(wǎng)卡，實(shí)現(xiàn)跨主機(jī)通信漠酿。

地址劃分

主控：

ip 地址：192.168.84.83

網(wǎng)卡：eth20

網(wǎng)關(guān)：192.168.84.1

自定義網(wǎng)橋名稱：br1

自定義網(wǎng)橋地址：192.168.84.1

主控上容器 ip 地址池：192.168.84.224/28

線卡

ip 地址：192.168.84.85

網(wǎng)卡：eth20

網(wǎng)關(guān)：192.168.84.1

自定義網(wǎng)橋名稱：br1

自定義網(wǎng)橋地址：192.168.84.1

主控上容器 ip 地址池：192.168.84.240/28

主控設(shè)置

在設(shè)置之前，主控中沒(méi)有 br 網(wǎng)橋谎亩，ip 路由顯示 192.168.84.0/24 網(wǎng)段路由通過(guò)網(wǎng)卡 eth20 端：

[root@jamza_vm_master_litepaas master]# ip addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 52:54:83:aa:bb:00 brd ff:ff:ff:ff:ff:ff
    inet 192.168.83.83/24 brd 192.168.83.255 scope global eth0
       valid_lft forever preferred_lft forever
    inet6 fe80::5054:83ff:feaa:bb00/64 scope link
       valid_lft forever preferred_lft forever
3: eth20: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 52:54:83:aa:bb:20 brd ff:ff:ff:ff:ff:ff
    inet 192.168.84.83/24 brd 192.168.84.255 scope global eth20
       valid_lft forever preferred_lft forever
    inet6 fe80::5054:83ff:feaa:bb20/64 scope link
       valid_lft forever preferred_lft forever
4: eth21: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 52:54:83:aa:bb:21 brd ff:ff:ff:ff:ff:ff
    inet 192.168.85.83/24 brd 192.168.85.255 scope global eth21
       valid_lft forever preferred_lft forever
    inet6 fe80::5054:83ff:feaa:bb21/64 scope link
       valid_lft forever preferred_lft forever
5: docker_gwbridge: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN
    link/ether 02:42:0c:8b:82:cc brd ff:ff:ff:ff:ff:ff
    inet 172.18.0.1/20 scope global docker_gwbridge
       valid_lft forever preferred_lft forever
6: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN
    link/ether 02:42:0f:34:eb:4b brd ff:ff:ff:ff:ff:ff
    inet 10.76.84.11/24 scope global docker0
       valid_lft forever preferred_lft forever
    inet6 fe80::42:fff:fe34:eb4b/64 scope link
       valid_lft forever preferred_lft forever
[root@jamza_vm_master_litepaas master]#
[root@jamza_vm_master_litepaas master]# ip route
default via 192.168.83.1 dev eth0
10.76.84.0/24 dev docker0 proto kernel scope link src 10.76.84.11
169.254.0.0/16 dev eth0 scope link metric 1002
169.254.0.0/16 dev eth20 scope link metric 1003
169.254.0.0/16 dev eth21 scope link metric 1004
172.18.0.0/20 dev docker_gwbridge proto kernel scope link src 172.18.0.1
192.168.83.0/24 dev eth0 proto kernel scope link src 192.168.83.83
192.168.84.0/24 dev eth20 proto kernel scope link src 192.168.84.83
192.168.85.0/24 dev eth21 proto kernel scope link src 192.168.85.83
[root@jamza_vm_master_litepaas master]#

在主控上創(chuàng)建一個(gè)網(wǎng)橋炒嘲，為網(wǎng)橋分配 ip 地址宇姚，并將自定義的網(wǎng)橋橋接本地的網(wǎng)卡 eth20：

[root@jamza_vm_master_litepaas master]#
[root@jamza_vm_master_litepaas master]# brctl addbr br1
[root@jamza_vm_master_litepaas master]#
[root@jamza_vm_master_litepaas master]# ifconfig br1 192.168.84.1 netmask 255.255.255.0
[root@jamza_vm_master_litepaas master]#
[root@jamza_vm_master_litepaas master]# brctl addif br1 eth20
[root@jamza_vm_master_litepaas master]#
[root@jamza_vm_master_litepaas master]#

修改 docker 的服務(wù)端配置，使得 docker 默認(rèn)連接自定義的網(wǎng)橋 br1夫凸，而不是默認(rèn)的 docker0 網(wǎng)橋浑劳，并配置主控上的容器 ip 地址池為 192.168.84.224/28，以防止主控上的容器 ip 地址與線卡上的容器 ip 地址沖突夭拌，注意魔熏，設(shè)置默認(rèn)網(wǎng)橋與地址池的字段分別是 bridge 與 fixed-cidr，然后重啟 docker 服務(wù)端：

[root@jamza_vm_master_litepaas master]#
[root@jamza_vm_master_litepaas master]# vi /etc/docker/daemon.json
[root@jamza_vm_master_litepaas master]#
[root@jamza_vm_master_litepaas master]# cat /etc/docker/daemon.json
{
"bridge":"br1",
"fixed-cidr":"192.168.84.224/28",
"cpu-rt-runtime":800000,
"cpu-rt-period":1000000,
"storage-driver":"overlay2",
"storage-opts":["overlay2.override_kernel_check=true"]
}
{ "insecure-registries":["172.18.0.3:5000"]}
[root@jamza_vm_master_litepaas master]#
[root@jamza_vm_master_litepaas master]#
[root@jamza_vm_master_litepaas master]# systemctl daemon-reload
[root@jamza_vm_master_litepaas master]# service docker restart
Redirecting to /bin/systemctl restart docker.service
[root@jamza_vm_master_litepaas master]#

此時(shí)查看主控上的 ip 地址鸽扁，出現(xiàn) br1 網(wǎng)橋：

[root@jamza_vm_master_litepaas master]# ip addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 52:54:83:aa:bb:00 brd ff:ff:ff:ff:ff:ff
    inet 192.168.83.83/24 brd 192.168.83.255 scope global eth0
       valid_lft forever preferred_lft forever
    inet6 fe80::5054:83ff:feaa:bb00/64 scope link
       valid_lft forever preferred_lft forever
3: eth20: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master br1 state UP qlen 1000
    link/ether 52:54:83:aa:bb:20 brd ff:ff:ff:ff:ff:ff
    inet 192.168.84.83/24 brd 192.168.84.255 scope global eth20
       valid_lft forever preferred_lft forever
    inet6 fe80::5054:83ff:feaa:bb20/64 scope link
       valid_lft forever preferred_lft forever
4: eth21: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 52:54:83:aa:bb:21 brd ff:ff:ff:ff:ff:ff
    inet 192.168.85.83/24 brd 192.168.85.255 scope global eth21
       valid_lft forever preferred_lft forever
    inet6 fe80::5054:83ff:feaa:bb21/64 scope link
       valid_lft forever preferred_lft forever
5: docker_gwbridge: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN
    link/ether 02:42:0c:8b:82:cc brd ff:ff:ff:ff:ff:ff
    inet 172.18.0.1/20 scope global docker_gwbridge
       valid_lft forever preferred_lft forever
6: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN
    link/ether 02:42:0f:34:eb:4b brd ff:ff:ff:ff:ff:ff
    inet 10.76.84.11/24 scope global docker0
       valid_lft forever preferred_lft forever
    inet6 fe80::42:fff:fe34:eb4b/64 scope link
       valid_lft forever preferred_lft forever
135: br1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP qlen 1000
    link/ether 52:54:83:aa:bb:20 brd ff:ff:ff:ff:ff:ff
    inet 192.168.84.1/24 brd 192.168.84.255 scope global br1
       valid_lft forever preferred_lft forever
    inet6 fe80::f0e1:fbff:fe3d:c088/64 scope link
       valid_lft forever preferred_lft forever
[root@jamza_vm_master_litepaas master]#

查看主控上的 ip 路由信息蒜绽，注意這里出現(xiàn)了兩個(gè) 192.168.84.0/24 網(wǎng)段的路由路徑：

[root@jamza_vm_master_litepaas master]# ip route
default via 192.168.83.1 dev eth0
10.76.84.0/24 dev docker0 proto kernel scope link src 10.76.84.11
169.254.0.0/16 dev eth0 scope link metric 1002
169.254.0.0/16 dev eth20 scope link metric 1003
169.254.0.0/16 dev eth21 scope link metric 1004
172.18.0.0/20 dev docker_gwbridge proto kernel scope link src 172.18.0.1
192.168.83.0/24 dev eth0 proto kernel scope link src 192.168.83.83
192.168.84.0/24 dev eth20 proto kernel scope link src 192.168.84.83
192.168.84.0/24 dev br1 proto kernel scope link src 192.168.84.1
192.168.85.0/24 dev eth21 proto kernel scope link src 192.168.85.83
[root@jamza_vm_master_litepaas master]#

線卡設(shè)置

在設(shè)置之前，主控中沒(méi)有 br 網(wǎng)橋桶现，ip 路由顯示 192.168.84.0/24 網(wǎng)段路由通過(guò)網(wǎng)卡 eth20 端：

[root@jamza_vm_lp0_litepaas master]# ip addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 52:54:83:cc:dd:00 brd ff:ff:ff:ff:ff:ff
    inet 192.168.83.85/24 brd 192.168.83.255 scope global eth0
       valid_lft forever preferred_lft forever
    inet6 fe80::5054:83ff:fecc:dd00/64 scope link
       valid_lft forever preferred_lft forever
3: eth20: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 52:54:83:cc:dd:20 brd ff:ff:ff:ff:ff:ff
    inet 192.168.84.85/24 brd 192.168.84.255 scope global eth20
       valid_lft forever preferred_lft forever
    inet6 fe80::5054:83ff:fecc:dd20/64 scope link
       valid_lft forever preferred_lft forever
4: eth21: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 52:54:83:cc:dd:21 brd ff:ff:ff:ff:ff:ff
    inet 192.168.85.85/24 brd 192.168.85.255 scope global eth21
       valid_lft forever preferred_lft forever
    inet6 fe80::5054:83ff:fecc:dd21/64 scope link
       valid_lft forever preferred_lft forever
5: docker_gwbridge: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN
    link/ether 02:42:4f:bd:6d:e3 brd ff:ff:ff:ff:ff:ff
    inet 172.18.0.1/20 scope global docker_gwbridge
       valid_lft forever preferred_lft forever
8: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN
    link/ether 02:42:40:2d:14:72 brd ff:ff:ff:ff:ff:ff
    inet 10.76.84.22/24 scope global docker0
       valid_lft forever preferred_lft forever
    inet6 fe80::42:40ff:fe2d:1472/64 scope link
       valid_lft forever preferred_lft forever
[root@jamza_vm_lp0_litepaas master]#
[root@jamza_vm_lp0_litepaas master]# ip route
default via 192.168.83.1 dev eth0
10.76.84.0/24 dev docker0 proto kernel scope link src 10.76.84.22
169.254.0.0/16 dev eth0 scope link metric 1002
169.254.0.0/16 dev eth20 scope link metric 1003
169.254.0.0/16 dev eth21 scope link metric 1004
172.18.0.0/20 dev docker_gwbridge proto kernel scope link src 172.18.0.1
192.168.83.0/24 dev eth0 proto kernel scope link src 192.168.83.85
192.168.84.0/24 dev eth20 proto kernel scope link src 192.168.84.85
192.168.85.0/24 dev eth21 proto kernel scope link src 192.168.85.85
[root@jamza_vm_lp0_litepaas master]#

在主控上創(chuàng)建一個(gè)網(wǎng)橋躲雅，為網(wǎng)橋分配 ip 地址，并將自定義的網(wǎng)橋橋接本地的網(wǎng)卡 eth20：

[root@jamza_vm_lp0_litepaas master]#
[root@jamza_vm_lp0_litepaas master]# brctl addbr br1
[root@jamza_vm_lp0_litepaas master]#
[root@jamza_vm_lp0_litepaas master]#
[root@jamza_vm_lp0_litepaas master]# ifconfig br1 192.168.84.1 netmask 255.255.255.0
[root@jamza_vm_lp0_litepaas master]#
[root@jamza_vm_lp0_litepaas master]# brctl addif br1 eth20
[root@jamza_vm_lp0_litepaas master]#

修改 docker 的服務(wù)端配置骡和，使得 docker 默認(rèn)連接自定義的網(wǎng)橋 br1吏夯，而不是默認(rèn)的 docker0 網(wǎng)橋，并配置線卡上的容器 ip 地址池為 192.168.84.240/28即横，以防止線卡上的容器 ip 地址與主控上的容器 ip 地址沖突噪生，注意，設(shè)置默認(rèn)網(wǎng)橋與地址池的字段分別是 bridge 與 fixed-cidr东囚，然后重啟 docker 服務(wù)端：

[root@jamza_vm_lp0_litepaas master]# vi /etc/docker/daemon.json
[root@jamza_vm_lp0_litepaas master]#
[root@jamza_vm_lp0_litepaas master]# cat /etc/docker/daemon.json
{
"bridge":"br1",
"fixed-cidr":"192.168.84.240/28",
"cpu-rt-runtime":800000,
"cpu-rt-period":1000000,
"storage-driver":"overlay2",
"storage-opts":["overlay2.override_kernel_check=true"]
}
{ "insecure-registries":["192.168.83.241:5000"]}
[root@jamza_vm_lp0_litepaas master]#
[root@jamza_vm_lp0_litepaas master]# systemctl daemon-reload
[root@jamza_vm_lp0_litepaas master]#
[root@jamza_vm_lp0_litepaas master]# service docker restart
Redirecting to /bin/systemctl restart docker.service
[root@jamza_vm_lp0_litepaas master]#

此時(shí)查看線卡上的 ip 地址跺嗽，出現(xiàn) br1 網(wǎng)橋：

[root@jamza_vm_lp0_litepaas master]# ip addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 52:54:83:cc:dd:00 brd ff:ff:ff:ff:ff:ff
    inet 192.168.83.85/24 brd 192.168.83.255 scope global eth0
       valid_lft forever preferred_lft forever
    inet6 fe80::5054:83ff:fecc:dd00/64 scope link
       valid_lft forever preferred_lft forever
3: eth20: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master br1 state UP qlen 1000
    link/ether 52:54:83:cc:dd:20 brd ff:ff:ff:ff:ff:ff
    inet 192.168.84.85/24 brd 192.168.84.255 scope global eth20
       valid_lft forever preferred_lft forever
    inet6 fe80::5054:83ff:fecc:dd20/64 scope link
       valid_lft forever preferred_lft forever
4: eth21: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 52:54:83:cc:dd:21 brd ff:ff:ff:ff:ff:ff
    inet 192.168.85.85/24 brd 192.168.85.255 scope global eth21
       valid_lft forever preferred_lft forever
    inet6 fe80::5054:83ff:fecc:dd21/64 scope link
       valid_lft forever preferred_lft forever
5: docker_gwbridge: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN
    link/ether 02:42:4f:bd:6d:e3 brd ff:ff:ff:ff:ff:ff
    inet 172.18.0.1/20 scope global docker_gwbridge
       valid_lft forever preferred_lft forever
8: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN
    link/ether 02:42:40:2d:14:72 brd ff:ff:ff:ff:ff:ff
    inet 10.76.84.22/24 scope global docker0
       valid_lft forever preferred_lft forever
    inet6 fe80::42:40ff:fe2d:1472/64 scope link
       valid_lft forever preferred_lft forever
118: br1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP qlen 1000
    link/ether 52:54:83:cc:dd:20 brd ff:ff:ff:ff:ff:ff
    inet 192.168.84.1/24 brd 192.168.84.255 scope global br1
       valid_lft forever preferred_lft forever
    inet6 fe80::10c6:b7ff:fe09:ff42/64 scope link
       valid_lft forever preferred_lft forever
[root@jamza_vm_lp0_litepaas master]#

查看線卡上的 ip 路由信息，注意這里出現(xiàn)了兩個(gè) 192.168.84.0/24 網(wǎng)段的路由路徑：

[root@jamza_vm_lp0_litepaas master]# ip route
default via 192.168.83.1 dev eth0
10.76.84.0/24 dev docker0 proto kernel scope link src 10.76.84.22
169.254.0.0/16 dev eth0 scope link metric 1002
169.254.0.0/16 dev eth20 scope link metric 1003
169.254.0.0/16 dev eth21 scope link metric 1004
172.18.0.0/20 dev docker_gwbridge proto kernel scope link src 172.18.0.1
192.168.83.0/24 dev eth0 proto kernel scope link src 192.168.83.85
192.168.84.0/24 dev eth20 proto kernel scope link src 192.168.84.85
192.168.84.0/24 dev br1 proto kernel scope link src 192.168.84.1
192.168.85.0/24 dev eth21 proto kernel scope link src 192.168.85.85
[root@jamza_vm_lp0_litepaas master]#

容器互通測(cè)試

在主控上創(chuàng)建容器页藻，網(wǎng)絡(luò)使用默認(rèn) bridge 模式桨嫁，根據(jù)之前的設(shè)定，容器將連接到自定義網(wǎng)橋 br1 上份帐，且從分配的地址池中取出可用的 ip 地址：

[root@jamza_vm_master_litepaas master]# docker run -it --privileged=true --name test busybox/x86_64 /bin/sh
/ #
/ # ifconfig
eth0      Link encap:Ethernet  HWaddr 02:42:C0:A8:54:E0
          inet addr:192.168.84.224  Bcast:0.0.0.0  Mask:255.255.255.0
          inet6 addr: fe80::42:c0ff:fea8:54e0/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:12 errors:0 dropped:4 overruns:0 frame:0
          TX packets:6 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:908 (908.0 B)  TX bytes:508 (508.0 B)

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:65536  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

/ #

在線卡上創(chuàng)建容器璃吧，網(wǎng)絡(luò)使用默認(rèn) bridge 模式，根據(jù)之前的設(shè)定废境，容器將連接到自定義網(wǎng)橋 br1 上畜挨，且從分配的地址池中取出可用的 ip 地址：

[root@jamza_vm_lp0_litepaas master]# docker run -it --privileged=true --name test busybox/x86_64 /bin/sh
/ #
/ # ifconfig
eth0      Link encap:Ethernet  HWaddr 02:42:C0:A8:54:F0
          inet addr:192.168.84.240  Bcast:0.0.0.0  Mask:255.255.255.0
          inet6 addr: fe80::42:c0ff:fea8:54f0/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:10 errors:0 dropped:3 overruns:0 frame:0
          TX packets:6 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:782 (782.0 B)  TX bytes:508 (508.0 B)

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:65536  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

/ #

主控上的容器 ping 線卡上的容器，以及線卡上的容器 ping 主控上的容器噩凹，結(jié)果顯示巴元，均能夠 ping 通。

#主控上的容器ping線卡上的容器
/ #
/ # ping 192.168.84.240
PING 192.168.84.240 (192.168.84.240): 56 data bytes
64 bytes from 192.168.84.240: seq=0 ttl=64 time=0.683 ms
64 bytes from 192.168.84.240: seq=1 ttl=64 time=0.403 ms
64 bytes from 192.168.84.240: seq=2 ttl=64 time=0.413 ms
64 bytes from 192.168.84.240: seq=3 ttl=64 time=0.296 ms
^C
--- 192.168.84.240 ping statistics ---
4 packets transmitted, 4 packets received, 0% packet loss
round-trip min/avg/max = 0.296/0.448/0.683 ms
/ #

#線卡上的容器ping主控上的容器
/ # ping 192.168.84.224
PING 192.168.84.224 (192.168.84.224): 56 data bytes
64 bytes from 192.168.84.224: seq=0 ttl=64 time=0.393 ms
64 bytes from 192.168.84.224: seq=1 ttl=64 time=0.421 ms
64 bytes from 192.168.84.224: seq=2 ttl=64 time=0.542 ms
64 bytes from 192.168.84.224: seq=3 ttl=64 time=0.414 ms
^C
--- 192.168.84.224 ping statistics ---
4 packets transmitted, 4 packets received, 0% packet loss
round-trip min/avg/max = 0.393/0.442/0.542 ms
/ #

若想主機(jī)也能 ping 主機(jī)上容器內(nèi)的驮宴，則需刪除主機(jī)上的路由信息：

192.168.84.0/24 dev eth20 proto kernel scope link src 192.168.84.85

192.168.84.0/24 dev eth20 proto kernel scope link src 192.168.84.83

?著作權(quán)歸作者所有,轉(zhuǎn)載或內(nèi)容合作請(qǐng)聯(lián)系作者

人面猴
序言：七十年代末逮刨，一起剝皮案震驚了整個(gè)濱河市，隨后出現(xiàn)的幾起案子堵泽，更是在濱河造成了極大的恐慌修己，老刑警劉巖恢总，帶你破解...
沈念sama閱讀 222,378評(píng)論 6贊 516
死咒
序言：濱河連續(xù)發(fā)生了三起死亡事件，死亡現(xiàn)場(chǎng)離奇詭異睬愤，居然都是意外死亡片仿，警方通過(guò)查閱死者的電腦和手機(jī)，發(fā)現(xiàn)死者居然都...
沈念sama閱讀 94,970評(píng)論 3贊 399
救了他兩次的神仙讓他今天三更去死
文/潘曉璐我一進(jìn)店門(mén)戴涝，熙熙樓的掌柜王于貴愁眉苦臉地迎上來(lái)滋戳，“玉大人，你說(shuō)我怎么就攤上這事啥刻〖檠欤” “怎么了？”我有些...
開(kāi)封第一講書(shū)人閱讀 168,983評(píng)論 0贊 362
道士緝兇錄：失蹤的賣(mài)姜人
文/不壞的土叔我叫張陵可帽，是天一觀的道長(zhǎng)娄涩。經(jīng)常有香客問(wèn)我，道長(zhǎng)映跟，這世上最難降的妖魔是什么蓄拣？我笑而不...
開(kāi)封第一講書(shū)人閱讀 59,938評(píng)論 1贊 299
?港島之戀（遺憾婚禮）
正文為了忘掉前任，我火速辦了婚禮努隙，結(jié)果婚禮上球恤，老公的妹妹穿的比我還像新娘。我一直安慰自己荸镊，他們只是感情好咽斧，可當(dāng)我...
茶點(diǎn)故事閱讀 68,955評(píng)論 6贊 398
惡毒庶女頂嫁案：這布局不是一般人想出來(lái)的
文/花漫我一把揭開(kāi)白布。她就那樣靜靜地躺著躬存，像睡著了一般张惹。火紅的嫁衣襯著肌膚如雪。梳的紋絲不亂的頭發(fā)上岭洲，一...
開(kāi)封第一講書(shū)人閱讀 52,549評(píng)論 1贊 312
城市分裂傳說(shuō)
那天宛逗，我揣著相機(jī)與錄音，去河邊找鬼盾剩。笑死雷激，一個(gè)胖子當(dāng)著我的面吹牛，可吹牛的內(nèi)容都是我干的彪腔。我是一名探鬼主播侥锦，決...
沈念sama閱讀 41,063評(píng)論 3贊 422
雙鴛鴦連環(huán)套：你想象不到人心有多黑
文/蒼蘭香墨我猛地睜開(kāi)眼，長(zhǎng)吁一口氣：“原來(lái)是場(chǎng)噩夢(mèng)啊……” “哼德挣！你這毒婦竟也來(lái)了？” 一聲冷哼從身側(cè)響起快毛，我...
開(kāi)封第一講書(shū)人閱讀 39,991評(píng)論 0贊 277
萬(wàn)榮殺人案實(shí)錄
序言：老撾萬(wàn)榮一對(duì)情侶失蹤格嗅，失蹤者是張志新（化名）和其女友劉穎番挺，沒(méi)想到半個(gè)月后，有當(dāng)?shù)厝嗽跇?shù)林里發(fā)現(xiàn)了一具尸體屯掖，經(jīng)...
沈念sama閱讀 46,522評(píng)論 1贊 319
?護(hù)林員之死
正文獨(dú)居荒郊野嶺守林人離奇死亡玄柏，尸身上長(zhǎng)有42處帶血的膿包…… 初始之章·張勛以下內(nèi)容為張勛視角年9月15日...
茶點(diǎn)故事閱讀 38,604評(píng)論 3贊 342
?白月光啟示錄
正文我和宋清朗相戀三年，在試婚紗的時(shí)候發(fā)現(xiàn)自己被綠了贴铜。大學(xué)時(shí)的朋友給我發(fā)了我未婚夫和他白月光在一起吃飯的照片粪摘。...
茶點(diǎn)故事閱讀 40,742評(píng)論 1贊 353
活死人
序言：一個(gè)原本活蹦亂跳的男人離奇死亡，死狀恐怖绍坝，靈堂內(nèi)的尸體忽然破棺而出徘意，到底是詐尸還是另有隱情，我是刑警寧澤轩褐，帶...
沈念sama閱讀 36,413評(píng)論 5贊 351
?日本核電站爆炸內(nèi)幕
正文年R本政府宣布椎咧，位于F島的核電站，受9級(jí)特大地震影響把介，放射性物質(zhì)發(fā)生泄漏勤讽。R本人自食惡果不足惜，卻給世界環(huán)境...
茶點(diǎn)故事閱讀 42,094評(píng)論 3贊 335
男人毒藥：我在死后第九天來(lái)索命
文/蒙蒙一拗踢、第九天我趴在偏房一處隱蔽的房頂上張望脚牍。院中可真熱鬧，春花似錦巢墅、人聲如沸诸狭。這莊子的主人今日做“春日...
開(kāi)封第一講書(shū)人閱讀 32,572評(píng)論 0贊 25
一樁弒父案砂缩，背后竟有這般陰謀
文/蒼蘭香墨我抬頭看了看天上的太陽(yáng)作谚。三九已至，卻和暖如春庵芭，著一層夾襖步出監(jiān)牢的瞬間妹懒，已是汗流浹背。一陣腳步聲響...
開(kāi)封第一講書(shū)人閱讀 33,671評(píng)論 1贊 274
情欲美人皮
我被黑心中介騙來(lái)泰國(guó)打工双吆，沒(méi)想到剛下飛機(jī)就差點(diǎn)兒被人妖公主榨干…… 1. 我叫王不留眨唬，地道東北人。一個(gè)月前我還...
沈念sama閱讀 49,159評(píng)論 3贊 378
代替公主和親
正文我出身青樓好乐，卻偏偏與公主長(zhǎng)得像匾竿，于是被迫代替她去往敵國(guó)和親。傳聞我的和親對(duì)象是個(gè)殘疾皇子蔚万，可洞房花燭夜當(dāng)晚...
茶點(diǎn)故事閱讀 45,747評(píng)論 2贊 361

自定義網(wǎng)橋模式實(shí)現(xiàn)跨主機(jī) Docker 通信

概念

地址劃分

主控：

線卡

主控設(shè)置

線卡設(shè)置

容器互通測(cè)試

推薦閱讀更多精彩內(nèi)容