Conceptual
Login

About Docker Container Networking: From veth Pairs to Overlay Networks

Copied

How Docker actually wires containers together: network namespaces and veth pairs, the bridge drivers and their embedded DNS, the iptables/NAT machinery behind published ports, and the host, none, macvlan, and VXLAN-based overlay modes. Finishers can predict which containers can reach which, explain why a port is reachable (or not) from the host, and debug real connectivity and MTU problems with nsenter and tcpdump.