Conceptual
Login

Docker Network Segmentation

Placing containers on separate user-defined networks segments them at the kernel level: Docker inserts iptables rules that drop traffic between different bridge networks, and a container attached to two networks acts as the only bridge point. The pattern isolates a database on a backend network while only the app tier joins both frontend and backend.

This Concept is waiting for its first lesson!

Placing containers on separate user-defined networks segments them at the kernel level: Docker inserts iptables rules that drop traffic between different bridge networks, and a container attached to two networks acts as the only bridge point. The pattern isolates a database on a backend network while only the app tier joins both frontend and backend.

Are you a teacher? Sign in to start contributing.

Sign In