Day-28 | Docker Networking | Bridge vs Host vs Overlay |Secure containers with custom bridge network
Vložit
- čas přidán 7. 08. 2024
- Support my work
www.buymeacoffee.com/abhishekprd Hi Everyone, This class is very important for understanding the networking in docker and to move ahead with concepts like Kubernetes and Docker Swarm
In this video, you will learn about:
1. Why you need networking on Docker ?
2. How does Docker Networking Work ?
3. What are different types of Networking in Docker ?
4. Which Networking is default and Out of the Box ?
5. Play with Docker containers and inspect their Networks
6. Create a custom bridge network to secure it from other containers
0:00 - Introduction to Docker Networking
01:15 -Why Docker Networking with Example
02:50 - Comparing Docker Networking with VM networking
05:40 - How containers talk to Host in terms of networking ?
07:15: Default Networking in Docker and What happens without that ?
09:30: Different types of Networking in Docker ?
10:40 - Host Networking in Docker
12:46 - Networking Deep Dive
20:30 - Live Demo with Practical Examples
GitHub Link (Material)
==================
github.com/iam-veeramalla/Doc...
Telegram channel
===============
telegram.me/abhishekveeramalla
GitHub Repo used in the video:
-------------------------------------------------
github.com/iam-veeramalla/Doc...
About me:
-----------------
LinkedIn: / abhishek-veeramalla-77...
GitHub: github.com/iam-veeramalla
Medium: / abhishekveeramalla-av
CZcams: / @abhishekveeramalla .
.
Disclaimer: Unauthorized copying, reproduction, or distribution of this video content, in whole or in part, is strictly prohibited. Any attempt to upload, share, or use this content for commercial or non-commercial purposes without explicit permission from the owner will be subject to legal action. All rights reserved.
I have taken many courses from Udemy and all. But I must say this is the best course so far on Devops. Very simple way to explain lot of new things, concepts. Loved this 45 days devops courses. Absolutely awesome.
Thanks alot Abhijit ❤️
agree
Dammmmmmmn... Those practicals were really amazing all concepts are clear.. Far better than theory.
Sir your Explanation on Secure + Bridge network + practical Example is just awesome .... 🙂
I purchase course from udemy and tried to understand docker networking but it was not clear to me. Thank to Abhishek sir for best and bestest explanation.😊
Glad to hear that
For the past couple of weeks, I was searching for a contentful DevOps channel, Thankfully I found this Master Man 🙌
❤️❤️❤️
Thanks again to the best teacher on the internet. Viewers need to click the Like button; it doesn't cost anything!
Thanks alot Bhai ..
Please keep sharing the videos
@@AbhishekVeeramalla hey abhi can you clear my doubt in the comment section....Hey Abhishek thanks for the wonderful explanation. I have one doubt in this time stamp 20:10 so here we are using the custom bridge to isolate the container. Here is my question -- even a custom bridge network also coming from the host right as per your diagram. How is this container secure?
@@AbhishekVeeramalla Because if any hacker reaches to the host he can reach to the container r8?
Thanks for making us to understand the concept in a easy way.
Best content & Better Explanation what better tutor can deliver and you are the best of best
Thank you bother 😍😍
Iam very thankful to Allah , Uss ne mujhe aap se mila diya Devops sikhne ke liye
Thanks alot Abhishek bhaiya
😍😍😍
@@AbhishekVeeramalla
Oh my God! Guruji thanks alot , Mai dhani Hogaya
No words to say, simply awesome ❤️❤️❤️....
Thanks alot. Please share
Superb explanation!
Docker networking allows containers to communicate with each other and host system. Two scenarios,
Container one connects to container two, Container one has isolation from container two. When you create a container. Docker creates veth, That is docker0. It allows docker container subnet to communicate with host. It is called bridge networking and it is default networking in docker. If there is not veth/docker0 the containerized application is not reachable from internet. So users will not be able to access application.
Great information
Recently I started following you, Your explanation is really awesome it makes people to understand easily, appreciating your efforts bro ...pls continue the same.
For sure .. Thanks
Best explanation. You're amazing 🤩
Thankyou for teaching this concept in a very crisp and easy manner, Before I use to be scare of docker networking.
but now i am pretty confident about it
You are most welcome
Thank you so much Abhishek.. you are awesome
High level Teacher /Mentor/Coach ..
Thanks
Amazing explaination❤
Glad you liked it
We appreciate you @Abhishek ..Thank you so much
Thanks alot .. Please share it with your friends and colleagues
Thank You ❤
Just Awesome.
Many many thanks
very helpful :)
great explanation.Thank you sir
You are welcome
Thank you ^^
Thank you sir 😊
The answer for the question that you asked us at @30:30 i.e. the IP address of the host-demo container would be either nothing or something in the subnet of the host network. Thanks for the wonderful explanation Abhishek.
Awesome 😎
awesome , this is the best for beginner
Thanks alot
Wonderful content
Thanks alot .. please share 🙏
Thanks bro, as always simple and excellent way of impacting knowledge. Lesson learnt docker(network)=k8s(namespace). More blessings all the way
Thanks
Awesome
Thanks a lot
Thank you so much SIr🫡😊🤗
Outstanding explanation 🤩
Glad you think so!
at 30:40 the host-demo container is created with host network name. so it will have completely different ip since its different from the bridge network and newly created custom network. Thank you for this valuable content. Clearly understood the implementation of the network in docker.
Then why don't it have host ip in the network section when we inspect the container?
just write the command : docker exec -it host-demo /bin/bash .It takes u to the host section and there u see root@Ip address which is your host machine Ip. But in network section u didn't get it. @@bhanuteja_04
Nice, thanks
Welcome
You are an amazing teacher Abhishek
Thank you
Thank you Abhishek❤
You're welcome
thank you devops guru
Most welcome !!
Good session Abhishek bro. One good point your session is person without much technical background can able to catch and since you are not using any typical corporate English words ,we are able to adopt video easily in simple language .
Thanks alot 🚀🚀
Thank you 😊🙏
You're welcome 😊
If possible, please make a video on Docker Compose, it would really help.. Thank you!
Sure thing, noted
I feel very fortunate , lucky to associated with you and enhancing my skills . This is a perfect example where you illustrates typical Docker Networking in simple terms and make things understandable . Keep enriching us with such knowledge .😊😇🙏. One question except the Timestamp that How this Networking models can co relate with AWS & other cloud or how we can integrate ? Please make a video on this . Thanks a lot in advance again .
My pleasure!
Thank you sir for wonderful explanation.. after this please cover docker compose part!!
Thanks Biswajit
Thanks Abhishek for this video. Please also assist on how one can explain gaps in experience.
Sure .. I will try to do that
Hi Abhishek, Thank you for valuable content. I was searching for some one who gives me clear understanding about devops what to learn, how to proceed step by step. Luckily I found you through LinkedIn post from some person, and I got answers to all my confusion regarding Devops. Kudos to you.
I have the following questions Abhishek,
Q1: For suppose I have created a container with default bridge network or host network or custom network, but later stage I want to change the network to different one. Can I change without deleting the container?
Q2: Host is communicating with different containers with different networks. Can we make the same among the containers? What I mean is can only a container in the same host have multiple networks so that it will communicate with different containers?
Thank you.
Thank you Abhishek for explaning about docker volumes i have a question how docker manages multiple volumes or storage volumes must be using resource like disk space from host os how storage is managed here pls clear this doubt
@Abhishek
thanks
Welcome
Thanks @abhishek ..was waiting for this
Please share it if you like the video
@@AbhishekVeeramalla Definitely, however I keep sharing your videos within my group 😊
Hey abhishek thanks for the wonderful explanation. I have one doubt in this time stamp 20:10 so here we are using the custom bridge to isolate the container. Here is my question -- even custom bridge network also coming from host right as per your diagram. How is this container secure?
Thank you so much for explaining this networking concept in very easy and clear way. If you have time could you please create a short demo for Overlay network. Thanks in advance.
Hi RKtech, I can do that but frankly it will not be of much use for the efforts as overlay networks like calico, sdn can be installed much simpler way once we move to Kubernetes.
But I will try to do that If I find some time
@@AbhishekVeeramalla Thank you so much!!
kudos to you🙌, I have attended paid training before, he didn't even teach this topic.
Glad it was helpful!
Is there any way login container can talk with finance in case any specific app from login need info from finance?
Hi, Question :
At 14:33 doesnt C2 have its own docker-0 which gets binded to the host network?
hey abhishek i have a doubt here if my host is on xyz range ,then the containers address will also be the same if i were to create the container in that host right?
super bro
Thanks .. Please share
@@AbhishekVeeramalla shared already
Abhishek I have to ask question, how input container will talk to Finance container when it is required since we have separated using custom bridge network as front end has to talk to backend.
hi abhishek videos are great. can you do a favour as you have different videos on interview questions on every tool , can you merge them all and make a long video like mostly asked devops interviews questions or important devops interviews questions like that. it would be very helpful for the students to prepare for the interviews and you can also add new questions into that also. i wish you could see this message.
Will try
@@AbhishekVeeramalla sure sir
15:30 if we use bridge network too i guess it's fine as our instance will be in a private subnet....am i right in this case?
can we use 3-4 same containers in docker? so one goes down one will serve the application?
Docker networking allows containers to communicate with each other and host system. Two scenarios,
Container one connects to container two, Container one has isolation from container two. When you create a container. Docker creates veth, That is docker0. It allows docker container subnet to communicate with host. It is called bridge networking and it is default networking in docker. If there is no veth/docker0 the containerized application is not reachable from internet. So users will not be able to access application.
Other ways of networking in docker..
2. Host networking - the container will directly use network of host, bind eth network of your host. Whoever has access to host have access to container. Least secure way of networking in docker.
3. Overlay networking when you need to create a network that is common in all the host of Kubernetes/swarm cluster.
Thks
When we log into host demo container from this container we are able to ping to all other containers why?
i have one question if bridge network error like container on the same host it will generate different subnet of each container how to resolve issue related bridge networking?
After Docker Image and container creation then how to run image through cli?
@30:30 IP address of host-demo container = IP address of host (EC2-instance)
Can you explain about docker swarm
Hi @Abhishek , 31:00 container was created with host network, and ip address corrsponds to host machine, how do we access that container if we have to ?
By access do you want to login ?
Please explain about docker compose
21:28 what do u mean by datach mode please explain
If multiple containers are created on the same host , are all containers connected to the same veth by default
sir you are best I have one question regarding Cloning Repository. Sir is it neccesery to clone your Repoitory to do practice or we can create our own?
Anything is fine
can u please share all diagram slide related to this docker series. I have one question when i see ur videos its got understand clearly but after somedays its forgot so i need to be see ur videos again from scratch its take time . if you share these pictorial diagram slide its usefull for recall faster.could you please share these files not only this video i would suggest to share all pictorial diagram for ur videos for better understanding.
Hi @abhishek, thank you very much for doing devops series, I have one query, at 22: 52 after installing ping command when i am trying to check using ping -V getting this error-- error ping: usage error: Destination address required. could you please check and help me out on this
Please explain about docker sharm
31:43 how come the ip address is nothing atleast it should show host ip right if you use host network? But why nothing is showing in that? Is my understanding wrong about host networking ?
@Abhishek request you to check my question - 1)How to access the host-demo container (it hold host network ) .As there is no IP for it then from different container ex-login how we can check if its reachable or not ?using which ip i can validate? 2 )from different host type network container how to communicate ?
you can use the host ip itself to login the container
@abhishekveramalla anna - how do the containers communicate after restart as ip and hostnames are dynamic ?
You will learn exactly the same thing in next classes
thank you so much@@AbhishekVeeramalla excellent work, i wish you grow more and more.
I use podman, I followed your tutorial, my finance container can talk to the others on different bridge?
By default no
Abhishek, At 20:30, you showed us how login and logout containers are connected to veth0 and payment container to docker network. The login an dlogout containers can talk to each other. But, if they want to tatalk to the payment container, is that possible? If yes, how?
I think it's not possible if we want to talk with payment container then we create container in that network , we don't want to talk with payment container that's why we isolate it. Is am I right Abhishek?
Time stamp 4:10 - can we consider container c1 and c2 as microservice 1 and microservice 2 , since containers are deployed as microservice or how pls clarify. TIA 😊
Yes
Thanks..... What about docker service, docker swarm and docker compose
We will not cover them in this course .. May be sometime after this course as many people are asking for docker compose
@@AbhishekVeeramalla okk thank you
30:42 minutes
Host network ip would be ip address of vm/machine (have same cidr block)
Hello Abhishek i have a doubt..(31.36)
When we run the container using the host network we can access the container using the host ip ..then..why dont we see the ip of the host machine in the network section when we inspect the container using the host network?
Because you are inspecting the container not the host if you want to see host ip hit this command "ip addr show
"
31:10 by default it's a ec2/host network when we trying to create a container with host
I did not get your question. Can you please elaborate?
Thanks for the session.
I have a couple of doubts.
1. .I have one Java application which is running on the Websphere application server and it will connect with Oracle .
If i use Docker i need to package my application + required software + Websphere + Oracle into one package ??
Is websphere needed ? You need to check if you can redesign the app to make it light weight.
@@AbhishekVeeramalla is it possible to run application without application server??
I have no clue
Plz do one more video on multistage docker build for java spring boot application
Sure .. I will try
I have a doubt suppose if we have 4 containers C1,C2,C3,C4 if C1,C2 can be connected via ping as we won't do anything, we will add bridge for C3,C4 as an isolation but in future if organization says that C3,C4 are good to be isolated but make a connection between C3 and C4 so how will I connect two isolated networks together?
Custom network between c3 and c4
hi bro i have a small doubt that how the login and logout container will talk each other with finance container like user details/ credit card detials in backend where the containers are logically isolated which we are made them secure.
is they are using some nat gateway like process ?
Is my doubt valid or not please respond. thanks alot for your knowledge sharing
even i didnt see the people sharing the knowledge. really thanks alot bro once agin
Hi Bro .. That was just an example.
In that example I mean to say .. consider there are two different projects which need isolation.. so for easy understanding I said .. login , logout and payments..
In general, if I have to answer your question
1. Mostly applications with in the same product will be in same network.
2. Assume for some reason they are not in same network.. then yes .. u can create some VXLAN tunnels or VPC peering .. e.t.c.,.
Thanks bro this cleared my doubt
@6:36 Brother I have a doubt, we are launching the host in one specific subnet, but when the container get created in another subnet, how is it possible
A seperate isolated network is created for the containers and this netowrk is shared with the hosts.
By default the network created is bridge network.
for example if we are taken 3-tire application project
like container-1 is frontend
container-2 is backend
container-3 is database
if we assign Bridge network to container-1 & 2 and assigned customized bridge network to container-3 (database). Now
how the backend container will connect to database and fetch the data?
Why do you keep them in different networks ?
If u still want them to connect, you need to setup vlan or vxlan or peering
@@AbhishekVeeramallathankyou for your immediate response
Please make a video in Hindi as well
#Network driver summary
1)The default bridge network is good for running containers that don't require special networking capabilities.
2)User-defined bridge networks enable containers on the same Docker host to communicate with each other. A user-defined network typically defines an isolated network for multiple containers belonging to a common project or component.
3)Host network shares the host's network with the container. When you use this driver, the container's network isn't isolated from the host.
4)Overlay networks are best when you need containers running on different Docker hosts to communicate, or when multiple applications work together using Swarm services.
Sir what is group in docker & what is use of that
Which group ?
@@AbhishekVeeramalla cgroup in docker
Day-26, 27, 28 done ✅️🙂
Keep going
You missed docker compose in your playlist
Hi Why the video after this Docker has membership ?? Means till day 45 has membership???
Hi Raja, No .. Please dont worry about that.
All the 45 Days course will be free.
Wait for today's video on "Introduction to kubernetes"
@@AbhishekVeeramalla 😅😊🤗 ThnkYou Sir
docker compose and docker swarm
Awesome .. sure 😃
Bro did we miss docker swarm and docker compose?
Yes, we will learn k8s instead.
Docker swarm
Bro,here u r explaing the 3 container (login , logout and finance). Here has 3 containers and u can creating the 1 bridge driver and 1 custom driver. By using multi stage docker container concepts can we create these 3 containers are merge into 1 containers. In that 1 containers only can we divide into bridge driver and custom drivers
yes you can do that
But i Guess the functionality will break (like db container always should be kept isolated)and you will get compromised with security like an attacked can easily get your sensitive data as i was only one container.
No commets just wow