Questions tagged [networking]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
11
votes
6answers
22k views

How to get kubernetes pod network CIDR

I have a running k8s cluster initialized with kubeadm. On initialization, I did not pass the option --pod-network-cidr How do I get the CIDR of the pod network I tried Looking at the /etc/...
6
votes
2answers
6k views

Why should you do port mapping for docker containers?

I have been using docker for a few months and I am just a developer not a DevOps or a networking person. However, I came across a docker-compose which maps an external port to an internal port. ...
6
votes
1answer
12k views

Internal network between container Docker Compose with outgoing connection

I am a newbie to Docker. I am trying to run my application containing from multiple containers Here is my docker-compose.yml file version: '3.3' services: php-service: container_name: 'php-...
6
votes
1answer
881 views

Networking between Docker containers

I have a docker container 'A' on a host 10.11.12.13 listening on port 0.0.0.0:8443->8443/tcp I have another container 'B' on same host how wants to talk to 'A' on 8443 via host. Thus when I run ...
6
votes
2answers
100 views

Securing communication between cloud VMs without private networks. Any strategy besides building own VPN? Spiped?

I am working on an application that requires a number of different services (web application + database + worker queues, XMPP server for messaging, redis, central authentication via LDAP, etc). For my ...
5
votes
1answer
412 views

How to prevent Azure Traffic Manager from routing over high latency connections in a fail-over scenario?

We have a service hosted in four regions, two in North America and two in Europe. We are using Azure Traffic Manager to provide: Performance-based routing - that is routing consumers to the service ...
4
votes
1answer
1k views

Bridged network adapter for Packer + VirtualBox?

So, I load an .ova image with packer of a minimal ubuntu linux installation. I realized after everything went through (Provisioners etc) and it successfully exported the output file. However, when ...
4
votes
1answer
3k views

How to fix a “heartbeat failure” in Docker Swarm?

My cluster is currently located in a single data center. I've been trying to change that by adding a single worker node from another data center, but so far it hasn't worked. I'm able to make this ...
3
votes
3answers
314 views

SSH tunneling on steroids

I have a remote redis machine with no ssh and no open ports except to the same lan + a remote machine (on the same lan) with ssh + my pc outside the lan. What I'm trying to do (mostly to see if it's ...
3
votes
2answers
7k views

VPN container providing access to host's LAN?

I'm kinda new to this Docker thing and I'm interested in getting a biffed up VPS for some containers (websites/data, mysql, nginx, rocket.chat, etc) but I wouldn't like to access them in the wild (...
3
votes
1answer
70 views

K8s cluster in peered VPC can't reach RDS cluster

I have two K8s clusters in the same VPC that I want to connect to an MySQL Aurora RDS cluster. One of the clusters can reach the RDS cluster just fine. The other, however, cannot. I'll call these eks-...
2
votes
2answers
155 views

Does Kubernetes internal networking keep traffic to co-located Pods where possible?

In Kubernetes, if I run a Service Foo on every Node, and also Service Bar on every Node, i.e. with DaemonSets. If a Pod from Service Foo needs to make a request to Service Bar, does Kubernetes ...
2
votes
2answers
153 views

localhost Pod to Pod communication k8s

I am trying to transfer an old legacy system to k8s. I have a custom server that client apps connect to in order to communicate with one another. Both the server and clients were originally created ...
2
votes
1answer
136 views

Check connectivity of 5000 + servers from ansible and get list of hosts which are connectable and which are not

I need to check connectivity of hosts on port 43. I can manually login and check connectivity by: nc -v `hostname` 43 nc -v `hostname_1` 43 Is there any ansible script that goes through all the ...
2
votes
2answers
925 views

Docker won't create a bridge network without being given an explicit subnet

The problem The problem is that this happens: $ docker network create alpine4 Error response from daemon: could not find an available, non-overlapping IPv4 address pool among the defaults to assign ...
2
votes
2answers
1k views

Join a Linux Docker swarm with a local Windows Docker for test purposes

I'm currenlty trying to connect/join a Linux Docker Swarm cluster with my Windows machine in order to test a stack without sending the stack over and over to my test cluster under Linux. My problem is ...
2
votes
1answer
542 views

Debug Docker DNS

In a stack with higher number of services it seems that Docker DNS does not work anymore which leads to effects that container's names are not known even to themselves. While I have filed this bug, I ...
2
votes
1answer
34 views

Why I cannot access k3s service from pod in rasbian?

I have installed K3S kubernetes on rasbian, and created a following mysql deployment on it: apiVersion: v1 kind: PersistentVolumeClaim metadata: name: mysql-data spec: accessModes: - ...
2
votes
1answer
97 views

phpMyAdmin using dockerised database

I have installed mariadb inside docker container, and mariadb is running properly inside that container. I want to get access of mariadb through phpMyAdmin from outside docker container. What will I ...
2
votes
0answers
20 views

Connecting to MySQL Remotely on Azure VM

I am having trouble connecting remotely to my MySql install that runs on an Azure VM. Here is what I did: Ubuntu VM with MySql 5.7 installed Bind Address set to 0.0.0.0 User granted rights with ...
2
votes
1answer
296 views

Docker: subnet clients can't ping other subnet

Two containers are created with this Dockerfile: FROM ubuntu:18.04 RUN apt update && apt upgrade -y && apt install -y vim iputils-ping net-tools tcpdump iproute* iptables traceroute ...
2
votes
0answers
27 views

Weird behavior of the Docker Client on Windows 10 [closed]

There is an - as perceived - unsystematic behaviour of Docker client to setup an IPv6 connection to registry, even if this is disabled in daemon.json. Client error: dial tcp: lookup ******** on [::1]...
1
vote
1answer
38 views

Sending HTTP requests to private EC2 DNS from other EC2 host works, but not from container on EC2 host

I want to make a container hosted on one EC2 host communicate with another container hosted on another EC2 host. Currently, if I send an HTTP request from host A to host B using host B's private DNS ...
1
vote
1answer
5k views

External access to internet from Kubernetes Pods

I'm having troubles with network access from pods. I had installed new Kubernetes cluster with flannel-network plugin, Checking the health of server - good. I tried to check network via busybox: ...
1
vote
1answer
22 views

AWS Inspector “High Risk” : port open to the internet with IP whitelisting

We use AWS Inspector to identify risks with our AWS assets. Today I received a finding, with a "high" severity. The finding said that the FTP port was open to the internet. However, after ...
1
vote
1answer
313 views

aws - Connect two private subnets?

I'm testing some cloudformation infrastructure templates, and I noticed that most of the examples include routing tables to connect private subnets to public subnets, but my question then is: if two ...
1
vote
1answer
772 views

docker-compose up: Error starting userland proxy: listen tcp 0.0.0.0:443: bind: address already in use

specific error: ERROR: for traefik Cannot start service traefik: driver failed programming external connectivity on endpoint frappe_docker_traefik_1 (...
1
vote
1answer
39 views

How can I access port 80 of another container, when port 80 is already exposed?

I have a docker file that runs some integration tests between two containers. It looks a bit like this: version: '3' services: test_client: image: client:latest depends_on: ...
1
vote
1answer
29 views

How to create a second IP just for dockers

Problem: my server is already using port 80 and I would like launch another service that uses port 80 on another address (I don't want to remember ports or force my wife to use non-default ports). I'...
1
vote
1answer
47 views

How do I setup an OpenShift route that will allow both 80 and 443 traffic to my app?

I'd like to setup a route that will pass both 80 and 443 traffic to the same service in OpenShift. When I try to create a second route it errors out. I want this to be in a yaml like would be used ...
1
vote
1answer
75 views

Mapping Outbound IPs to 1 IP in Azure App Services

I have 3 components of my architecture running in 3 separate Azure App Services. Each app service has 4 outbound IPs. So whenever I have to deploy my app onto the client's premise, I have to whitelist ...
1
vote
1answer
36 views

Kubernetes: How to expose a Pod/Deployment to the Nodes Network

Ok, let's assume I've got the following theoretical setup: I want to somehow assign IP-Addresses accessible by the PCs on the left to my pods. I can set routes etc. as I need since this setup is ...
1
vote
1answer
260 views

Kubelet config file — > clusterDNS

clusterDNS: - "10.32.0.10" The above is a flag passed to the kubelet file, i dont know what it refers to clsuter DNS ? Is it refers to VPC CIDR or any subnet CIDR ?
1
vote
1answer
240 views

Docker bridge network Configuration for containers

I have an Angular application deployed in the container . If I log in to the container I can curl to the port 4200. I have mapped to port 9001 to connect from my host . But I can't curl from my host ...
1
vote
1answer
390 views

IOS_Command Module - Delayed Prompt Issue (Cisco 3850 - IOS XE)

I'm new to the Ansible world, so I'll do my best to explain everything. If I leave something out or need to clarify, just let me know. So, I've been working on upgrades for various Cisco switches/...
1
vote
1answer
118 views

How to perform low-level inspecting of a Docker network traffic?

I'm currently in a scenario that requires Docker container C to be able to intercept communication between docker containers A and B, without their knowledge. I am basically attempting to do a ...
1
vote
1answer
30 views

How to attach two (or more) networks to a container so they are available when the container starts?

I noticed if you try to attach a container to two networks, the following syntax does not cause an error, but effectively attach the container only on the network specified by the last --network: ...
1
vote
1answer
22 views

What are the benefits of spreading the various services of a multi-tiers application over several user-define bridges?

I have a simple system made of a database backend, several instances of a web application and a load balancer. Each service is running in its own Docker container, all of them being hosted on the same ...
1
vote
1answer
783 views

How to identify the physical IP of where Kubernetes API server runs

Question In a Kubernetes cluster, there is a Docker network IP which looks to be the API server. However, not sure how to identify the physical IP and location of the box in which it is working. If ...
1
vote
1answer
1k views

Docker daemon error on joining swarm node - could not find local IP address - unknown port

Consider the following setup: Three hosts in the same network: Host A - SLES Host B - Ubuntu Host C - Ubuntu Then, the following has worked: Init swarm on A Join swarm at B, make B a manager The ...
1
vote
0answers
30 views

How to execute a “hello redis” sample python script on a container from the host?

How do I execute this "Hello Redis!!!" sample from the host? root@mordor:~# root@mordor:~# docker container ls CONTAINER ID IMAGE COMMAND CREATED ...
1
vote
0answers
42 views

Can't set up basic k3s cluster on raspberry pi setup

I apologize in advance if this is trivial as I am an undergrad and quite new to kubernetes, raspberry pis, and networking in general. I only included the fact I am working on Raspberry Pi for ...
1
vote
0answers
247 views

Using IPTable to restrict traffic to a Docker container [closed]

I've spun up a web server that listens on port 8080 like this: # docker run --rm -p 8080:8080 python:3.6 sh -c "cd tmp && python -m http.server 8080" I want to dynamically adjust iptables ...
1
vote
0answers
712 views

Understanding Docker swarm networking and ports accessibility on the host [closed]

Given the simplest example, the test swarm consists just of one node so all containers run in one place. The stack is setup to run in a custom Docker network; the containers are not directly mapped ...
0
votes
2answers
19 views

Service to service communication - through proxy or direct?

A common scenario is two or more services behind a reverse proxy, typically each deployed in a container: | service 1 | | service 2 | \ / \ / ...
0
votes
1answer
31 views

why is “docker run” used to connect to redis?

Trying to understand what's happening here: root@mordor:~# root@mordor:~# docker ps -a CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS ...
0
votes
2answers
158 views

How to Save and Restore the Iptables rule and configuration from file?

I want to save the current iptables configuration to a file and restore it from a file. I have a lot of rules and modifying the rules really hard for me. So, how can i do that?!
0
votes
1answer
103 views

Blacklist network ranges Docker is allowed to use for its containers (swarm mode)

Basically I need to blacklist an IP range (and maybe multiple ranges) so that Docker can use any other IPs for its containers BUT IPs in this range. Assume I have my docker nodes in a swarm of n ...
0
votes
1answer
63 views

call container B inside container A using docker networks

I have two docker containers A and B that runs on the same user-defined network. Container A has a port published, container B hasnt. I do my requests on container's A published port, but container A ...
0
votes
1answer
70 views

Isolate service networks with Docker Compose

I have two containerised services, A and B, with which I wish to isolate network communications with docker compose. There is also a shared service C which is not isolated from A or B and is free to ...