Docker Networking Tutorial, ALL Network Types explained!

Рет қаралды 186,578

Күн бұрын

Docker Networking Tutorial where I explain all network types, that you need to know! I show you how and when you should use the different network types and what you need to consider.
Based on the official Documentation: docs.docker.com/network/ #Docker #DockerNetworking #HomeLab
Kubernetes Tutorial: • Kubernetes explained s...
Get started with Docker: • How to use Docker and ...
Teleport-*: goteleport.com/thedigitallife
Follow me:
TWITTER: / christianlempa
INSTAGRAM: / christianlempa
DISCORD: / discord
GITHUB: github.com/christianlempa
PATREON: / christianlempa
MY EQUIPMENT: kit.co/christianlempa
Timestamps:
00:00 - Introduction
01:02 - Why should you configure Docker Networks?
01:55 - The Default Bridge Network
04:20 - The Custom Bridge Network
08:52 - Bridge Networks and Container Isolation
09:52 - The Host Network
10:49 - When to use MACVLANs or IPVLAN?
12:38 - The MACVLAN Network
17:55 - The IPVLAN Network
19:05 - Summary and what about Overlay Networks?
________________
All links with "*" are affiliate links.

Пікірлер: 239

@esra_erimez 2 жыл бұрын

Okay, watching this at normal speed!

@BenReese 2 жыл бұрын

😂 I listened at 2x while vaccuming, but will definitely have to review again later for the mac/IP vlan stuff.

@tmagrit 2 жыл бұрын

Totally 🤣

@SitarHero28 Жыл бұрын

I thought I was in 2x speed lol. This dude knows his stuff.

@ivandrofly 2 ай бұрын

I nearly reach the speed of light when speeded to 2x

@esra_erimez 2 ай бұрын

@@ivandrofly 🤣

@FinbarrAherne 2 жыл бұрын

This is exactly what I was looking for! Thank you for the clear and concise explanations for all the different network configs, and also for stepping through each.

@christianlempa 2 жыл бұрын

Glad it was helpful!

@jayp9158 Жыл бұрын

Incredible video. I’m currently binge watching your channel and I’m amazed by the the quality of all your content. Keep it going man, you are great!

@D3M0320 2 жыл бұрын

Your videos are absolutely fantastic!! I used some of your tutorials to stand up docker / portainer on my raspberry pi to self host some things without having a potentially power hungry and noisy desktop running 24/7. I greatly appreciate the time you take to provide these wonderful videos!

@christianlempa 2 жыл бұрын

Thank you so much! I'm glad you like the videos :)

@HiltonT69 2 жыл бұрын

This is a great, clear and concise explanation of these different network types. :)

@christianlempa 2 жыл бұрын

Thanks! 😀

@c-pup 2 жыл бұрын

Yet another great video! I've recently been struggling setting up two piholes on the same host and your explanation of macvlan was 1000% times more concise than every other forum that I've read through over the past couple days. Keep up the great work! Liked and subscribed!

@christianlempa 2 жыл бұрын

Thank you so much! Great to hear that :)

@mal-avcisi9783 Жыл бұрын

this guy knows his shiat. bravo !

@jeytis72 2 жыл бұрын

Great job, Christian. Very clear and informative... as always. Thanks

@christianlempa 2 жыл бұрын

Thank you! :)

@Ellyll Жыл бұрын

This video was really helpful for me to get a nice quick understanding of docker networking, thank you!

@xcaptz 2 жыл бұрын

So amazing, this video saves me a lot of research 🧐. Well, thanks a lot bro!

@giovannipetroselli6103 2 жыл бұрын

Very clear and precise. All your videos are amazing. Thanks Cristian!

@christianlempa 2 жыл бұрын

Thank you so much 😃

@datpspguy Жыл бұрын

i'll be completely honest, i was literally thinking about this and probably mentioned it out loud near my computer and "boom" this was in my homepage waiting. I was trying to figure out if I should build a lab using containers w/ static IP's or just use Virtualbox in bridged mode so this really helped me.

@rathio7662 2 жыл бұрын

Hello Christian, your videos are great, from my side perfect to understand. Please stay tuned, I learned so much.

@christianlempa 2 жыл бұрын

Thanks, I'm glad you like them:)

@localadm 2 жыл бұрын

this is very good stuff, well explained. going to check that with dockerized pi-hole or adguard. thanks a bunch!

@christianlempa 2 жыл бұрын

Thanks mate! ❤

@umarchy Жыл бұрын

Nice video cristian. The explanation was concise. Just learned about the macvlan through your video. Thanks.

@axreds Жыл бұрын

even if the video is 1 year old it made my day!!! Thanks Chris very clear and well done

@christianlempa Жыл бұрын

Thank you :) I’m glad it helps you!

@AnythingGodamnit 10 ай бұрын

Loved this, thank you. I now feel like I have the knowledge to solve my current Docker networking problem - excited to try!

@christianlempa 10 ай бұрын

Thanks for watching :)

@majidalikhanquaid984 2 жыл бұрын

Clear and too the point, that's what I was looking for !! Thank you so much

@christianlempa 2 жыл бұрын

Glad it helped!

@josel82 Жыл бұрын

Really good video. Very well explained and well produced. You got yourself a new suscriber 👍🏽

@christianlempa Жыл бұрын

Thanks and welcome

@rrr92462 6 ай бұрын

Excellent video. Great examples and explanations.

@ErickWarden 8 ай бұрын

Earned a subscriber with this one!! This helped me fix my Docker home assistant network problem!

@FabianoChagas Жыл бұрын

Awesome as always! Thanks for sharing

@oppailover3087 Жыл бұрын

Thank You man! I was just randomly watching this video and figured out how to solve port 53 issue for pi-hole in docker

@christianlempa Жыл бұрын

Thank you! I’m glad it helped you :)

@John._.T Жыл бұрын

Really informative. Just stumbled on to your channel. Fast paced and great information. Just managed to keep up as I'm completely new to docker. Subscribed to your channel. Thanks 🙂

@christianlempa Жыл бұрын

Thank you! Hope you find some useful stuff here :)

@xseman 2 жыл бұрын

simple explanation even with examples, great stuff!

@christianlempa 2 жыл бұрын

Glad you liked it!

@jakedeng2288 2 жыл бұрын

very useful video, I solved one of my docker issues right after watching this!

@christianlempa 2 жыл бұрын

Thank you! :) Glad you could solve some issues with it!

@alex.username 4 ай бұрын

What a concise, well structured and informative video!

@christianlempa 4 ай бұрын

thank you so much!

@dakzer55 2 жыл бұрын

Thank you for this refresher on docker networking. Has fixed my issue with trying to get HADR for Sql Server instances running in docker

@christianlempa 2 жыл бұрын

You're welcome! Glad it helped you :)

@thegrimreaper156 Жыл бұрын

I spent probably 3h figuring out how to assign another external IP to a Bind9 container, doing a lot of research and trying with ChatGPT. Found your video, solved in 5min !!!

@paulkalus41 Жыл бұрын

Hi Cristian, this is a another great video. The Macvlan part is something I've been searching and searching for, always coming to a dead end. The way you have explained and demonstrated it is spot on and has solved my issues, and I've actually learned something! :)

@Error_404-F.cks_Not_Found 2 жыл бұрын

Best docker video i've watched. Super informative.

@Error_404-F.cks_Not_Found 2 жыл бұрын

I will say it would have been nice to see all these in compose also though.

@christianlempa 2 жыл бұрын

Wow, thanks!

@yaroslavozerov1121 9 ай бұрын

Bro! Thanks for the video, but the biggest thanks for picture on your t-shirt! I had such poster on my wall in 90th! That's awsome))

@yoddy0 Жыл бұрын

Thanks for the insight on the various network drivers on docker. I blindly used a macvlan from a tutorial for pihole but wanted to understand how it works.

@jlamoree 2 жыл бұрын

This was very helpful. Thank you!

@pierrer3109 Жыл бұрын

Thanks ! Great explanations. Have a nice day

@christianlempa Жыл бұрын

Thx you too ;)

@marcoroose9973 2 жыл бұрын

Thanks for this video and especially for the netshoot hint. This was something I missed a lot - until now ;-)

@christianlempa 2 жыл бұрын

You're welcome! :)

@GlenMillard 2 жыл бұрын

Now I have watched your video - it was very informative. Thanks much for this. Much appreciated! 😎😎

@christianlempa 2 жыл бұрын

Thank you ;)

@palandiagmail Жыл бұрын

Amazing explanation thanks

@chriscrafty Жыл бұрын

This was very helpful - thank you!

@christianlempa Жыл бұрын

Glad it was helpful!

@HideBuz Жыл бұрын

Finally somebody who explains that stuff clearly and without jargon! Thank you so much for your contributation!

@zhitoooo 9 ай бұрын

short, useful , great, awesome thanks alot

@GlenMillard 2 жыл бұрын

I just started watching and I hope this lands nicely! You sound exactly like 'Klaus' on 'American Dad' I love the show, by the way. Now I'm going to watch your video!

@christianlempa 2 жыл бұрын

lol

@AlejandroRodriguez-wt2mk Жыл бұрын

wonderful work

@PeterBatah 5 ай бұрын

I created a docker instance in VMWare ESXi and proceeded to follow your instructions. I could not get past the part where I assigned the newly created macvlan to an nginx container for example. The fix was to configure "Promiscuous Mode set to Accept" in my VMWare network settings. In case anyone should run into the same issue. Thank you for sharing Christian. Much appreciated as always. All the best in 2024.

@derBerg 2 жыл бұрын

VIelen Dank! Ich kann nicht verstehen, wie Menschen hier downvoten.. Very interesting! As a guy having a new job in IT as a career changer i need to close alot of knowledge gaps of stuff which seems to be common sense in IT. I like your style!

@christianlempa 2 жыл бұрын

Vielen Dank! :)

@liquidintegrity 2 жыл бұрын

Wow. Just wow. Thank you!

@christianlempa 2 жыл бұрын

You're very welcome!

@okoeroo 2 жыл бұрын

Excellent explanation

@christianlempa 2 жыл бұрын

Thanks ❤

@spop1974 2 жыл бұрын

Great stuff! Thanks!

@christianlempa 2 жыл бұрын

Glad you liked it!

@nicoladellino8124 Жыл бұрын

Very nice video, THX.

@christianlempa Жыл бұрын

Thanks! :)

@HewaSaleem 2 жыл бұрын

Moin Moin, Best explanation ever! keep up.

@christianlempa 2 жыл бұрын

Moin moin! Danke :)

@anikrahman9871 Жыл бұрын

Your video is fantastic

@christianlempa Жыл бұрын

Thank you so much 😀

2 жыл бұрын

"Who needs swarm?'" everyone who wants a simple cluster running one command "docker swarm init"

@m3kbeatz 2 жыл бұрын

Indeed.

@Eratzer Жыл бұрын

Thx macvlan is what i needed for some containers

@christianlempa Жыл бұрын

👍

@cjntrade4717 2 жыл бұрын

Awesome brother

@christianlempa 2 жыл бұрын

Thx

@donya_ayandeh Жыл бұрын

You're wonderful 👍

@cloud2050 Жыл бұрын

Great video! You cleared up my confusion on docker network. BTW! What are you using to show the AD block statistics in your browser startpage?

@mal-avcisi9783 Жыл бұрын

this guy knows his shiat. bravo !

@nicoladellino8124 2 жыл бұрын

Nice video, TNX

@ricoshen18 3 ай бұрын

great job.

@wieliewiel2630 2 жыл бұрын

Great video!

@christianlempa 2 жыл бұрын

Thanks! :)

@sidharthanp5163 2 жыл бұрын

Great video.

@christianlempa 2 жыл бұрын

Thanks!

@zuberkariye2299 2 жыл бұрын

I am into 4 mins in the vid now, and I love it already, I am just learning docker and I never thought that docker could have a network(IP) since it runs on top of the OS. Gonna add this to my list of docker reference in the future.

@christianlempa 2 жыл бұрын

Thank you mate!

@lakshminarasimmanv 2 жыл бұрын

it would be helpful if you can make a dedicated video on overlay networks and try to install Traefik and Portainer in swarm mode.

@PaulDickson7 Жыл бұрын

Great video, started watching network chucks got confused and came to your video. Makes a lot more sense. Couldn't find your cheat sheet in Github though :(

@christianlempa Жыл бұрын

Thanks, mate! Sorry, the cheat-sheet is still a work in progress. github.com/xcad2k/cheat-sheets

@PaulDickson7 Жыл бұрын

@@christianlempa All good thank you for putting the time to explain everything in this video. It was clear, concise and easy to follow. I literally spent my weekend going round in circles with Docker networking only to give up and delete everything and start again.

@mr.wayfarer6082 2 жыл бұрын

Much appreciated, sir. Home Assistant and Plex containers conflict listening the same 1900 port while running on bridge connection fe

@awd4ever 2 жыл бұрын

Thank you

@psicodelico6 2 жыл бұрын

Greetings from Argentina

@sbkpilot1 Жыл бұрын

Great video! One thing I noticed is that in WSL2 with Docker Desktop the behavior is rather different - when you create a new bridge network there is no interface created. I wonder how it works in this case.

@jameshunt5184 Жыл бұрын

Awesome video, really liking your content 🔥 I was wondering if you could help clear up something. In portainer I'm able to change the network of a container to 'container' mode that allows me to run containers through another containers network. In my case I run containers through a VPN container. However how is this done in a Docker compose file?

@rhb.digital 2 жыл бұрын

good stuff.. thnx

@christianlempa 2 жыл бұрын

Thanks!

@interestedperson1865 2 жыл бұрын

thanks helpful

@christianlempa 2 жыл бұрын

Thanks!

@davidsomething4867 Жыл бұрын

Just getting started with docker and loving it. One thing I am struggling with is getting IPvLAN L2 working with fixed IP addresses through compose when the ipvlan already exists on the host, jus seem to get one error after another when specifying the existing network. I've got multiple USB interfaces on a debian instance loaded on a PC and am using IPvLAN as alternative to macvlan and having to setup promiscuous mode although I have macvlan 802.1q working on another host so I have no issue with the concept and have a good understanding of networking as a whole. I've setup an ipvlan with fixed addresses for a ipam container with a separate container for the database and this works no problem but I had to setup the containers the old fashioned way.

@banalidadesculturapop 2 жыл бұрын

Hey I I love your content and im learning a lot , can you please advise , How should the network from traefik be configured if i want it to also ping another internal server ?

@christianlempa 2 жыл бұрын

It depends where the server is running, if it's on the same host you should be able to connect via bridge network, otherwise you might checkout host mode.

@RockTheCage55 5 ай бұрын

Hi Christian this has been excellent. When you created the macvlan why did you specify it on a different subnet '/32'?

@christianlempa 5 ай бұрын

thank you! :) subnet /32 basically means "1" address

@RamiKattan 5 ай бұрын

Nice tutorial, I knew a lot about networks in docker but learnt a couple of things, including the netshoot container, very useful. Something that was not mentioned: macvlan containers can't reach bridge containers with their internal IP address (172.16.x.x), they can only reach the host ip and port, is this correct? I created a traefik container and bound it to macvlan to make it get a distinct IP address, but it was unable to reach any container until I added a second network for traefik on the bridge network.

@victoryosikwemhe2280 Жыл бұрын

Nice. Just a quick question, if we can ping a device (in a macvlan network) from another device in a spearate network, why is the scope local?

@coolglass6672 Жыл бұрын

Great videos dude! can i ask why Owasp says we should set ICC to false? I am guessing they just mean they want us to use custom networks?

@fbifido2 2 жыл бұрын

1. Can you modify the default bridge (name, ip, subnet, type) ? 2. When you create a custom network, how do you tell it what type to create, ip-range, subnet, etc... 3. Type shown: Host, Bridge, Null?, macvlan, ipvlan. Are there more ? 4. Can you change the default bridge that docker use for new containers? 5. Can any of these network do dhcp ip reservation using mac-address, or support static ip-address? 6. Does any of the network support ipv6, default seems to be ipv4?

@mateusjunior1937 2 жыл бұрын

HI Always a big fan of your tuto, i´m wondering, can you advise me a good open source on-premise cloud ?

@christianlempa 2 жыл бұрын

I've never considerd using this, but you might take a look at OpenStack.

@elmarulian 2 жыл бұрын

Hello! awesome videos as always, I'm struggling to achieve two docker hosts on a physical server that has two ethernet ports, on of the hosts should expose a service in one of the ethernet ports and the other host should connect and receive data from services in the other port, this is an overlay network use case for what it looks like, or is there another way?

@elmarulian 2 жыл бұрын

Or is the macvlan the key to attach some containers to a physical network and other containers to another physical network?

@nacholopez496 Жыл бұрын

i love little bold :3

@mdawas1986 6 ай бұрын

Hello Christian, Many thanks for the video where is the cheat sheet located, I visited your github and I cant find it, seems you have changed the location since your video hope you can share link thanks

@jmtfreelancer4473 2 жыл бұрын

Hello, Your video is what i needed . But I woul dlik eto do the same on MAC OSX . what is the solution to have two static IP on my HOST OSX?

@JelmerBoumaJeebeevee 2 жыл бұрын

Hi, first I love this and the other videos. Just a question. Is it possible to do this in docker-compose? And how do I do that? I tryed it but it did not work for me. Keep up the good work.

@christianlempa 2 жыл бұрын

Sure, Docker-Compose offers the same features. Btw, when you create a docker-compose stack it will automateically create a new bridge network for your Docker compose, but you could also assign existing networks to your containers by defining it in the file.

@stevefxp 2 жыл бұрын

I am a tech professional of over 35 years and I am learning Docker on my own. I understand networks well but in beginning to think about how I want networks deployed. I would prefer having a subnet that is container only. If I did this would I still use bridge or macvlan driver?

@dpicollege 2 жыл бұрын

I have two docker machine on same host one on overlay network of swarm and another one is on bridge network so which rules for my iptables or route i should write that my both container can communicate each other?

@NetanelZa Жыл бұрын

That search-result seemed to be the answer to all my problems; I'm running PhotonOS ( docker environment for ) on my ESXi and just cannot figure that out. I cannot ping the host, nor does it seem like it got to talk to my router ( according to the devices list ). How should I debug this? I tried to enable promiscuous mode for the vmswitch but it is still not working.

@ivandrofly 2 ай бұрын

4:21 - DNS limitation by using the DEFAULT bridge network 10:51 - mentioned about PI-hole (adguard like) issue

@christofferahlback 4 ай бұрын

Great video! Thanks! I’m on a mac and have had a gard time getting ipvlan to work over the wifi. As for now, I just need some containers for development tools (web dev) and would really like to get their own ip-numbers rather than running them as localhost… seems like it’s not as easy on Mac OS as in Linux at the moment. Any ideas? Cheers!

@christianlempa 4 ай бұрын

hmm I've not tried it out unfortunately, only used it on linux

@TheLaelkrol Жыл бұрын

How can I make my container use a specific interface on a host system i.e. I have one cable connection and two wlan interfaces and I've got 3 containers. I'd like each to use a dedicated interface. Which type of network will be best and how would I go about it?

@mikekane9734 Жыл бұрын

Interesting! What type of network should I use for my home server setup and run containers behind wireguard client for my torrenting?

@christianlempa Жыл бұрын

Depends on if the wireguard is in docker as well or not.

@sonalkumarjha5200 Жыл бұрын

@admin can you please upload a solution video for issue "use of closed network connection" while pushing large to docker hub.

@wstrater 2 жыл бұрын

How about a video on Docker DNS? Seems to be biting me quite a bit lately. I can access other containers but fail when accessing external sites such as Let’s Encrypt.

@coltennabers634 2 ай бұрын

So how does mac vlan solve the port issue? Can I have multiple containers in macvlan network using same port?

@SebastianMBraun Жыл бұрын

What ist your terminal you use in 17:19? I like it!

@39zack Жыл бұрын

setting up an reverse proxy is easy enough, but how do you setup "client-containers" behind the proxy that can only access the outside though the proxy? I guess if you set up the other containers on the same network as the proxy or an vlan network, they have direct access to the outside network If this was physical machines or VMs, I would just have put 2NICs on the proxy machine but no clue if this is possible on dockers or if that is how you do it

@syetrack3374 3 ай бұрын

I have multiple public static ip on host interface but I can't figure out how to use each of them on separate containers for docker. When I run a container its assessable by every public ip I have

@jslegers1973 Жыл бұрын

Thank you Christian for this great explanation. I do have a question is it possible to have a container in two networks? I'm trying to create a compose file with PiHole and Unbound. The Pihole has a macvlan for my network and also a bridge to communicate to unbound. But every time I want to compose it the bridge network on the PiHole gives an error Cannot start service pihole: No available addresses on this pool. IS it even possible to create a container in two different networks?

@christianlempa Жыл бұрын

Thank you! :) It's possible to add a container to more networks, but I'm not sure how that works with a macvlan.

@annahri 2 жыл бұрын

You can just drop grep and use `ip a ` instead

@fahadnaif2170 2 жыл бұрын

Can you please explain the CNI and CSI, differences like for example CNI’s Flannel, calico,, etc. Thanks.

@christianlempa 2 жыл бұрын

That's unfortunately a topic where I have NO experience at all :D Maybe in the future.

@brandoneadie8566 2 жыл бұрын

I'm trying to figure out how to use my 5 external public ip addresses, and have my router see lets say 5 containers from docker. Which I would give each one its own external public ip address. Would you have any idea how to achieve this?