![Copyright © PLUMgrid, Inc. 2011-2016
Container Network Interface
Treats container / group (pod) of containers synonymous to Linux network namespaces
Networks described on JSON based format for network and IPAM config in /etc/cni/net.d
{
"name": “test-net",
"type": ”bridge”,#type of network plugin:bridge,macvlan,ipvlan,commercial
"bridge": "cni0",
"isGateway": true,
"ipMasq": true,
"ipam": {
"type": “host-local", # can be pluggable IPAM
"subnet": "10.22.0.0/16",
"routes": [{ "dst": "0.0.0.0/0" }]
}}
Capable to providing networking for Docker containers as well
Other networking options
13](https://image.slidesharecdn.com/dockernetworkingmeetupapril2016pdf-160415071342/85/Docker-Networking-in-Swarm-Mesos-and-Kubernetes-Docker-Meetup-Santa-Clara-April-2016-13-320.jpg)
Docker Networking in Swarm, Mesos and Kubernetes [Docker Meetup Santa Clara | April 2016]
- 1. Docker Networking in Swarm, Mesos, Kubernetes April 2016 Fawad Khaliq - @fawadkhaliq
- 2. Copyright © PLUMgrid, Inc. 2011-2016 Introduction Speaker 2 Sr. Software Engineer at PLUMgrid Khaliq Fawad Twitter: @fawadkhaliq IRC: fawadkhaliq
- 3. Copyright © PLUMgrid, Inc. 2011-2016 • Introduction • Docker Orchestration Tools • Docker Swarm • Mesos • Kubernetes • Docker Networking • Early (host, bridge, container modes) • Modern (libnetwork) • PLUMgrid’s involvement in the Docker ecosystem • Demo Agenda 3
- 5. Copyright © PLUMgrid, Inc. 2011-2016 • Scheduling • Scaling • Management • Upgrades • Availability • Service Discovery • Networking Docker Orchestration Tools 5
- 6. Copyright © PLUMgrid, Inc. 2011-2016 Docker Swarm 6
- 7. Copyright © PLUMgrid, Inc. 2011-2016 Mesos 7
- 8. Copyright © PLUMgrid, Inc. 2011-2016 Kubernetes 8
- 9. Networking 9
- 10. Copyright © PLUMgrid, Inc. 2011-2016 • Early • Bridge mode • Host mode • Container mode • Evolution • Container Network Model (CNM) Docker Networking Strategies 10
- 11. Copyright © PLUMgrid, Inc. 2011-2016 Docker’s interface between the docker daemon and the network Container Network Model (CNM) • Docker specific (Docker Swarm) • Network = Subnet • ‘Metadata’ to select group policies at the network level • Options: arbitrary key/value data libnetwork 11
- 12. Copyright © PLUMgrid, Inc. 2011-2016 docker network create Create a network connect Connect container to a network disconnect Disconnect container from a network inspect Display network information ls List all networks rm Remove a network Docker Network CLI 12
- 13. Copyright © PLUMgrid, Inc. 2011-2016 Container Network Interface Treats container / group (pod) of containers synonymous to Linux network namespaces Networks described on JSON based format for network and IPAM config in /etc/cni/net.d { "name": “test-net", "type": ”bridge”,#type of network plugin:bridge,macvlan,ipvlan,commercial "bridge": "cni0", "isGateway": true, "ipMasq": true, "ipam": { "type": “host-local", # can be pluggable IPAM "subnet": "10.22.0.0/16", "routes": [{ "dst": "0.0.0.0/0" }] }} Capable to providing networking for Docker containers as well Other networking options 13
- 14. Copyright © PLUMgrid, Inc. 2011-2016 Networking and Orchestration Tools Together 14 * In discussion phase ** In design/implementation phase
- 15. PLUMgrid’s Involvement in the Docker Ecosystem 15
- 16. Copyright © PLUMgrid, Inc. 2011-2016 • PLUMgrid and Docker Swarm • PLUMgrid libnetwork plugin • Available at https://github.com/plumgrid/libnetwork-plugin • Uses PLUMgrid Open Networking Suite • PLUMgrid and Mesos • Mesos Networking under Docker containerizer • Mesos Networking Isolators PLUMgrid in Docker Ecosystem 16
- 17. Copyright © PLUMgrid, Inc. 2011-2016 Docker Swarm and PLUMgrid Libnetwork (CNM) PLUMgrid Plugin Slave Node Container Container Container Container Docker Daemon Master Node Swarm Manager Consul / etcd / … Docker Daemon (in each slave) Daemon IOVisor PLUMgrid Director Cluster 17
- 18. Copyright © PLUMgrid, Inc. 2011-2016 Docker Swarm and PLUMgrid VD: t1 18
- 19. DEMO 19
- 20. Copyright © PLUMgrid, Inc. 2011-2016 Demo: Docker Swarm 20 Overview Network Creation w/ Docker Swarm (libnetwork) Containers on-boarded on PLUMgrid VDs Security Policies Use Case Micro-segmentation & Networking for Containers and microservices What to expect Changing Policies alters the traffic flow between containers Environment
- 21. (408) 800-7586 www.plumgrid.com 5155 Old Ironsides Dr. Suite 200 Santa Clara, CA 95054 THANK YOU! Keep in Touch and Contact Us