This comprehensive guide explains Docker's six network modes, their technical characteristics, suitable use‑cases, step‑by‑step configuration commands, performance considerations, security hardening, troubleshooting techniques, and monitoring practices for production‑grade container networking.
This comprehensive guide explores container networking fundamentals, Docker network modes, Kubernetes CNI plugins, network security policies, monitoring, troubleshooting, and performance optimization, providing practical commands and configuration examples for operations engineers.
This article walks through Docker’s built‑in networks, details the four network modes (bridge, host, none, container), shows how to create and inspect network namespaces, configure veth pairs, map ports, set DNS and custom bridges, and provides concrete command‑line examples and diagrams.
This guide explains Docker container networking on a CentOS host, covering three connection methods, the use and principles of the --link option, and step‑by‑step commands to create MySQL and CentOS containers, test connectivity, and access MySQL from the CentOS container.
This comprehensive guide explores container networking fundamentals, Docker and Kubernetes network models, popular CNI plugins, security policies, monitoring, troubleshooting, and performance optimization, providing practical commands and best‑practice recommendations to help operations engineers master the technology and excel in high‑paying network‑focused roles.
This guide walks you through setting up Nginx Proxy Manager using Docker and Docker‑Compose, covering quick installation, essential features, custom Docker networking, health‑check configuration, and advanced options, all illustrated with code snippets and screenshots.
This comprehensive guide explains Kubernetes' layered architecture, core components, and container networking fundamentals, covering IP‑per‑Pod, CNI plugins, Flannel and Calico implementations, DNS, Service types, Ingress, and public‑cloud networking strategies for multi‑cluster deployments.
This guide walks through installing calicoctl, a Calico command‑line tool for managing Kubernetes network policies, covering prerequisites, manifest deployment for both Kubernetes‑ and etcd‑backed data stores, verification commands, and practical tips for a smooth setup.
ByteDance engineers are adopting the Linux kernel's new netkit feature, an eBPF‑based container network device that bypasses veth's L2 bottlenecks, delivering up to 10% performance gains and lower CPU usage while maintaining compatibility with existing workloads.
This guide explains three Docker container interconnection methods—direct IP, host‑IP with exposed ports, and the legacy --link mechanism—detailing their pros and cons, usage requirements, underlying principles, and step‑by‑step command examples on CentOS.
Facing bandwidth contention when high‑volume video analytics compete with online services, Dahua partnered with the openEuler community to replace the tc htb limiter with an eBPF‑based Kmesh‑bwm solution that introduces lock‑free packet scheduling, directional monitoring and multi‑priority bandwidth guarantees, achieving over 50 % latency reduction, more than 50 % increase in container deployment density, and roughly 30 % overall resource savings.
This article walks through Docker's default docker0 bridge, explains how containers obtain IP addresses via veth‑pair interfaces, demonstrates inspecting container IPs, and shows how to create and use custom bridge networks so containers can communicate by name or IP, including adding existing containers to the new network.
This guide explains Docker's three default networks, the four container network modes (bridge, container, host, none), how Linux bridges and veth pairs work, commands for network namespaces, port mapping, custom bridge creation, and practical examples for configuring Docker networking.
This article explains how to use the nsenter tool to enter a container's network namespace for packet capture and other host‑level debugging, provides scripts for logging into Kubernetes nodes, shows a DaemonSet deployment for persistent access, and compares nsenter with the newer kubectl debug temporary container approach.
This article details the design, implementation, and production rollout of a container VPC solution that leverages ipvlan for CNI, a custom IPAM integration with OpenStack/Ultron, and extensive operational fixes to achieve reliable, high‑performance networking for Kubernetes workloads across multiple clusters.
This article explains Docker's default docker0 bridge, how it creates a virtual Ethernet pair for each container, the role of IP addresses and routing, how iptables NAT and filter rules enable container‑to‑host and container‑to‑container communication, and how to customize the bridge and DNS settings.
The talk explains how Vivo leverages a Kubernetes‑based solution that combines Calico and RoCEv2 to migrate offline training workloads from single‑NIC to multi‑NIC, integrating loss‑less RDMA, planning topology and IP allocation, and employing Volcano, SpiderPool, Macvlan, and Multus CNI for efficient container networking.
This guide explains why Multus CNI is needed for multi‑network pods in Kubernetes, describes its architecture, walks through installing Multus alongside Calico and Flannel, shows how to configure NetworkAttachmentDefinitions, adjust Calico’s NIC selection, and demonstrates testing pod connectivity and routing limitations.
This article offers a comprehensive overview of the Antrea CNI plugin for Kubernetes, covering its core concepts, pros and cons, typical use cases, and a step‑by‑step installation and testing workflow to help you secure and optimize container networking.
This article explains how Kubernetes assigns a unique IP address to each pod by detailing the roles of container runtimes, CRI, CNI plugins, Flannel's vxlan encapsulation, Linux bridges, and the node IPAM controller that allocates podCIDR subnets across the cluster.
This article explains Docker's container networking concepts—including the CNM model, native drivers, bridge, host, macvlan, none modes, port mapping, overlay SDN—as well as storage options and Compose orchestration techniques for building robust cloud‑native applications.
This article explains the fundamentals of Linux network namespaces and bridge devices, showing how they isolate resources, form hierarchical PID trees, and enable inter‑namespace communication for container platforms like Docker and Kubernetes.
This article provides a comprehensive guide to Docker container networking, covering the default networks, the four network modes (bridge, container, host, none), Linux network namespaces, veth pair creation, and practical container operations such as hostname configuration, DNS settings, port mapping, and custom bridge setup.
This article provides a comprehensive guide to Docker container networking, covering the default networks, the four network modes (bridge, host, none, container), virtual Ethernet pairs, Linux network namespaces, and practical configuration examples such as port mapping and custom bridge creation.
This article provides a deep technical walkthrough of Alibaba Cloud's Terway ENI‑Trunking mode, explaining its architecture, pod‑level networking resources, VLAN‑based traffic steering, security‑group handling, and ten concrete SOP scenarios that illustrate how data packets travel between pods, services, and external clients.
This article explains Docker's default bridge network, how to inspect and customize it, and provides detailed procedures for enabling IPv6 on both the default bridge and user‑defined bridge networks, including daemon configuration, sysctl tweaks, ndppd setup, and optional IPv6 NAT.
This tutorial explains how to build a functional single‑host container network using Linux network namespaces, virtual Ethernet (veth) pairs, a bridge, IP routing and NAT, covering isolation, inter‑container communication, external connectivity, port publishing and rootless considerations.
This article provides a comprehensive guide to Docker container networking, covering the default network drivers, the four Docker network modes (bridge, container, host, none), Linux network namespace commands, veth pair creation, inter‑namespace communication, and practical configuration examples such as port mapping, custom bridges, and DNS settings.
This article explains how to virtualize network resources on a single Linux host using network namespaces, virtual Ethernet (veth) pairs, bridges, IP routing, NAT, and iptables, enabling containers to communicate with each other, the host, and the external world without writing custom code.
This guide details Docker's built‑in network drivers, explains the four primary network modes—bridge, host, container, and none—covers creating and managing network namespaces, veth pairs, custom bridges, and common container operations such as port mapping, DNS configuration, and hostname handling.
This article explains Docker's default networks, the four network modes (bridge, host, none, container), how to configure each mode, create custom bridges, use veth pairs, and perform common container networking operations such as port mapping and DNS settings.
Using eBPF to bypass traditional bridge, netfilter, and routing steps, this article demonstrates how container network packet forwarding can be accelerated, reducing receive and transmit latency by around 40‑82%, with detailed perf‑ftrace analysis, code examples, and performance comparisons of three forwarding modes.
This article explains Docker's built‑in networking, details the four network modes (bridge, host, container, none), shows how to inspect and configure networks with commands like docker network, ip netns and veth pairs, and provides practical examples for port mapping, DNS, and custom bridge creation.
This guide presents Kube-OVN performance benchmarks, explains the testing environment and qperf commands, and provides step‑by‑step data‑plane optimization techniques—including CPU mode, NIC queue tuning, tuned profiles, interrupt binding, OVN LB disabling, FastPath module, OVS kernel compilation, and STT tunnel activation—to help administrators achieve lower latency and higher throughput in Kubernetes clusters.
This guide explains Docker's built‑in network types, the four container network modes, how bridges and veth pairs work, and provides step‑by‑step commands for creating and managing network namespaces and custom bridges.
This guide walks through Docker's container networking options, explaining container mode sharing, building and testing overlay networks with Consul, and configuring Macvlan networks for cross‑host communication, complete with step‑by‑step commands and visual diagrams.
This guide explains Docker's built‑in network types, the four primary network modes (bridge, host, container, none), how the Docker bridge (docker0) works, how to create and manage Linux network namespaces, veth pairs, and custom bridge networks, plus practical commands for inspection and port mapping.
OpenYurt v0.7.0 introduces the Raven solution, a non‑intrusive, encrypted‑tunnel based approach that seamlessly connects pods across public‑cloud, edge‑to‑edge, and edge‑to‑cloud environments without modifying existing CNI plugins, while also adding EdgeX Foundry LTS support, Kubernetes 1.22 compatibility, and IPv6 networking.
This article reviews the evolution of cloud‑native networking in China, analyzes platformization and underlay trends, explains the technical challenges of traditional CNI solutions, and details Kube‑OVN's architecture, features, and roadmap as a comprehensive enterprise‑grade Kubernetes networking platform.
This article outlines a dual‑stack overlay/underlay cloud‑native network design using Kube‑OVN, addressing banks' high‑availability, security, and performance challenges while providing a practical migration path from traditional IaaS to container‑based infrastructure.
This article explains how Kubernetes ensures container-to-container communication using network namespaces, veth pairs, bridges like docker0, and advanced CNI plugins such as Flannel and Calico, detailing their underlying Linux networking components, routing mechanisms, and deployment considerations for both intra‑host and inter‑host scenarios.
This article presents a detailed, bank‑focused cloud‑native networking solution that leverages Kube-OVN's overlay/underlay dual‑stack architecture, OVS‑based performance, and security features to meet the high‑availability, high‑throughput, and regulatory demands of large financial institutions.
Learn how to virtualize network resources on a single Linux host using network namespaces, virtual Ethernet devices, bridges, and NAT, enabling isolated containers to communicate with each other, the host, and the external internet without complex code, while covering setup, routing, and port publishing.
This article explains Alibaba's open‑source Hybridnet solution for ACK Distro, detailing its design principles, core CRD models, default overlay behavior, step‑by‑step commands for underlay deployment, network type switching, and resource management in hybrid cloud environments.
This tutorial explains how to create isolated, virtualized network stacks for containers on a single Linux host using network namespaces, virtual Ethernet pairs, a Linux bridge, routing, NAT, and iptables, and shows how to expose container services to the outside world.
This tutorial walks through creating a fully isolated container network on a single Linux host using network namespaces, virtual Ethernet (veth) pairs, a Linux bridge, IP routing, NAT with iptables, and port publishing, covering both root and rootless container scenarios.
This tutorial walks through the fundamentals of single‑host container networking on Linux, covering network namespaces, virtual Ethernet (veth) pairs, bridges, IP routing, NAT, port publishing, Docker network drivers, and rootless container considerations, all with step‑by‑step commands and explanations.
This tutorial explains how to isolate, virtualize and connect container network stacks on a single Linux host using network namespaces, virtual Ethernet pairs, a Linux bridge, routing, NAT and iptables rules, and shows how to expose container services to the external world.
This tutorial walks through building isolated, virtualized networking for containers on a single Linux host using network namespaces, virtual Ethernet pairs, Linux bridges, IP routing, NAT, and iptables rules, enabling inter‑container communication, host access, and external connectivity without writing any custom code.
This article explains the fundamentals of Linux routing, why routing is required for containers and overlay networks, how the kernel selects routes when sending and receiving packets, and provides practical commands and code examples for configuring and testing routing tables in cloud‑native environments.
This article explains how Flannel implements container networking in Kubernetes using two backends—VXLAN for encapsulated cross‑node traffic and host‑gw for direct routing—detailing packet flow, routing configuration, and performance considerations.
This article details how vivo AI's research institute created a hybrid‑cloud AI computing platform by integrating on‑premise bare‑metal servers with Alibaba Cloud ACK, using Kubernetes, Calico, and Terway to achieve elastic GPU resources, advanced storage features, and cost‑effective scaling for deep‑learning workloads.
This article explains Kubernetes container networking fundamentals, covering pod-to-pod communication, Linux network namespaces, veth pairs, bridges, and the various CNI plugins such as Flannel and Calico that enable cross‑host networking with overlay, routing, and underlay modes.
The second‑edition Kube‑OVN survey collected 267 valid responses from diverse industries, revealing increased container deployment on virtual machines, a rise in public‑cloud usage, a jump in Kube‑OVN adoption to 40%, growing demand for IPv6/dual‑stack and multi‑tenant networking, and user expectations centered on KubeVirt, VPC enhancements, and eBPF integration.
This article provides a comprehensive technical analysis of Linux virtual Ethernet (veth) pairs, detailing their practical configuration, underlying kernel creation mechanisms, and complete network communication workflow within containerized environments like Docker.
This article explains how Kubernetes enables container communication using Linux network namespaces, veth pairs, bridges, iptables, and CNI plugins such as Flannel and Calico, covering both intra‑host networking with docker0 and cross‑host networking modes like overlay, host‑gw, and underlay with BGP routing.
This article demystifies single‑host container networking by explaining network namespaces, virtual Ethernet pairs, Linux bridges, routing, NAT with iptables, Docker network drivers and rootless container limitations, while providing step‑by‑step commands and code snippets for practical implementation.
This guide walks through building isolated single‑host container networks on Linux using network namespaces, virtual Ethernet pairs, bridges, routing and NAT, showing step‑by‑step commands to create, connect, and expose containers, troubleshoot connectivity, and understand Docker’s networking models.
This article explains how to build a high‑performance, 5K‑node hybrid‑cloud container network by reviewing Kubernetes pod and service networking, comparing iptables, IPVS and eBPF implementations, and describing large‑scale overlay, BGP, IPVlan, and NodeLocal DNS solutions.
This tutorial explains how to isolate, virtualize, and connect Linux network stacks on a single host using network namespaces, virtual Ethernet pairs, Linux bridges, routing, NAT, and iptables, covering both basic concepts and practical commands for Docker and Podman environments.
This article demystifies single‑host container networking by explaining network namespaces, virtual Ethernet (veth) pairs, Linux bridges, IP routing, NAT masquerading, port publishing, and the differences between Docker and rootless container networking, all with practical command‑line examples.
This article details Qunar's adoption of Calico as a CNI solution, covering its three‑layer architecture, core components, large‑scale deployment practices, IPAM behavior, pod‑to‑pod and pod‑to‑external traffic flows, encountered issues, and the overall benefits for a production Kubernetes environment.
The 2021 Container Network Technology Conference celebrated Kube-OVN’s anniversary, showcasing its mature multi‑tenant, cross‑cluster, and hardware‑accelerated networking features, outlining a roadmap focused on performance, eBPF‑based security and monitoring, and highlighting real‑world deployments with partners such as Intel, F5, banks and telecom operators.
This article explains the fundamentals of Kubernetes container networking, covering the network stack, bridge, veth pairs, host networking, ARP resolution, and then dives into cross‑host communication methods, comparing Overlay solutions such as Flannel and Calico with Underlay approaches like BGP, illustrated with concrete commands and diagrams.
This article explains Docker's container networking fundamentals, covering single‑host communication modes (host, bridge, none, container‑shared, custom), their advantages and drawbacks, and then delves into cross‑host solutions such as overlay, Weave, and Calico, comparing their architectures and performance implications.
This tutorial walks through building isolated single‑host container networks using Linux network namespaces, virtual Ethernet (veth) pairs, bridges, routing, NAT and iptables, enabling containers to communicate with each other, the host, and the external Internet.
This tutorial explains how to build a functional single‑host container network on Linux by using network namespaces, virtual Ethernet pairs, a Linux bridge, IP routing, NAT with iptables, and port publishing, providing step‑by‑step commands and troubleshooting tips.
This article explains how to virtualize and isolate Linux network resources for containers using network namespaces, virtual Ethernet devices, bridges, routing, and NAT, providing step‑by‑step commands to connect containers, expose ports, and enable external internet access without relying on Docker.
This article explains Flannel's role in Kubernetes networking, shows how to deploy it, details its supported data‑forwarding modes such as VXLAN and Host‑GW, and walks through the complete packet journey from a source pod to a destination pod.
This article explains why containers and Docker are popular, outlines the network and security challenges of building container cloud platforms, compares bridge, host, container and none networking modes, reviews major CNI solutions such as Calico, Flannel, Weave and Macvlan, and discusses how service mesh complements CNI in multi‑cluster environments.
This article explains why Kubernetes requires an overlay network, describes Docker’s virtual bridge limitations, introduces Flannel’s architecture and its three data‑forwarding modes—UDP, VXLAN, and host‑gw—detailing their mechanisms, performance trade‑offs, and how the StarRing TCOS platform leverages these modes for different cluster sizes and network topologies.
This article explains the core Linux networking technologies—Network Namespace, bridge devices, Veth pairs, iptables/netfilter, and routing—that Docker relies on to provide isolated, configurable network stacks for containers, and includes practical command examples.
The article summarizes Liu Mengxin’s June 11 talk on cloud‑native networking, covering its definition, basic requirements, open‑source CNI implementations, control‑ and data‑plane designs, and the functional, operational, security, and performance challenges faced when deploying container networks at scale.
This comprehensive guide walks you through Linux containers, Docker fundamentals, installation, command‑line usage, image lifecycle, Dockerfile creation, registry setup (including authentication), Docker Compose orchestration, networking options, restart policies, Harbor deployment, best practices, and monitoring techniques.
Rakuten Mobile leveraged Kubernetes, OpenNESS, and the open‑source Kube‑OVN data‑plane to replace virtual machines with containers in its NFV and RAN infrastructure, creating the first cloud‑native 5G network and outlining future enhancements for telecom‑grade performance and scalability.
This study evaluates Kubernetes container networking options—Docker host networking, Flannel, IPvlan, VXLAN, host‑gw, and AWS‑VPC—by measuring latency, throughput, and installation cost under high‑load conditions, revealing IPvlan as the lowest‑latency, highest‑throughput solution while host‑gw offers a balanced, low‑dependency alternative.
The article answers a technical question about using Calico as the network mode in container cloud networks, explaining that Calico relies on three‑layer routing with BGP, requiring hardware BGP support and sufficient processing capacity to host the full‑mesh routing for all nodes.
This article explains Kubernetes’ fundamental network model, detailing the three core constraints and four design goals, exploring network namespaces, comparing Underlay and Overlay approaches, reviewing popular CNI solutions such as Flannel, Calico, Cilium and WeaveNet, and outlining practical NetworkPolicy configuration steps.
This article explains Docker’s origins, core concepts, and the challenges of container IP volatility, then compares client‑side and server‑side service discovery methods, evaluates DNS, LVS/IPVS, Nginx and HAProxy solutions, and presents practical load‑balancing architectures—including dynamic SLB integration and rolling‑update strategies—for reliable container deployments.
This article details Ctrip’s multi‑generation cloud networking solutions, tracing the progression from early VLAN‑based Layer‑2 designs through SDN‑enabled large‑scale networks to container‑centric and cloud‑native architectures, highlighting hardware topologies, software integrations, and operational lessons for large‑scale data‑center environments.
This article chronicles Ctrip’s network architecture evolution—from early VLAN‑based private‑cloud designs, through SDN‑enabled large‑layer‑2 solutions, to container‑aware hybrid‑cloud and cloud‑native approaches like Cilium—offering practical insights and lessons for large‑scale network engineers and teams.
This article details the challenges and solutions encountered while transitioning a rapidly growing financial services platform from a VM‑centric private cloud to a hybrid environment that combines containers and virtual machines, covering network integration, IP management, container image standards, resource isolation, scheduling compatibility, and future lightweight container strategies.
This article demonstrates several methods for enabling a web container to communicate with a Redis container in Docker, covering the deprecated link approach, three net-based techniques, and the recommended custom network solution, while highlighting their advantages and limitations.
This article recounts Didi’s Elastic Cloud journey, explaining why a private cloud was needed, why containers and Kubernetes were chosen, detailing the overall architecture, product features, networking, monitoring, logging, storage solutions, and sharing practical insights and future plans.
This article details the evolution of Tongcheng Travel’s PaaS platform, describing its shift from Docker Swarm host networking to a custom container network using Calico and Contiv, the implementation of public‑IP allocation, and the monitoring solution built with OVS sFlow, Redis and ELK.
This article details Meizu’s private cloud platform built on Kubernetes, covering cluster architecture, single-image deployment, master and minion configurations, Calico networking, 4/7‑layer load balancing, monitoring with Prometheus, logging pipelines, automated deployment, multi‑datacenter strategies, and performance optimizations for a robust, low‑cost infrastructure.
At OSCON 2017 in Austin, Huawei’s chief architect highlighted the rapid growth of China’s open‑source market and showcased the company’s open‑source cloud stack—including OpenStack‑based IaaS, OpenSDS storage, iCAN container networking, and DevOps tools—aimed at speeding customers’ digital transformation.
This article reviews six Docker networking projects—Libnetwork, Pipework, Socketplane, Weave, Flannel, and Tinc—explaining their architectures, key concepts, and how they extend Docker's native networking to meet security and advanced functionality requirements.
The article reviews the challenges Docker introduces to traditional virtualization networks, explains the concepts of SDN, compares three open‑source container SDN solutions (Flannel, Calico, Weave), and details Qiniu's practical implementation of overlay networking, OpenFlow control, service discovery, load balancing, and security groups for microservice architectures.
A Linux kernel bug caused virtual Ethernet (veth) devices in container environments to ignore TCP checksum validation, leading to corrupted data reaching applications, and the article explains the incident, investigation, reproducible tests, root cause in the veth driver, and the patch that resolves the issue.
This guide explains how to use the Ambassador container pattern to enable Docker containers on different hosts to communicate without needing to know each other's IP addresses, illustrated with a step‑by‑step Redis example.
