跨主機(jī)容器間點(diǎn)到點(diǎn)連接實(shí)戰(zhàn)2實(shí)戰(zhàn)描述實(shí)現(xiàn)跨主機(jī)通信目錄3實(shí)戰(zhàn)描述部署兩臺(tái)Docker虛擬機(jī)，并且分別安裝Docker環(huán)境，兩套環(huán)境內(nèi)均分別啟動(dòng)容器，分別綁定到各自的網(wǎng)橋中，最終實(shí)現(xiàn)兩個(gè)容器之間的連通。4實(shí)現(xiàn)跨主機(jī)通信安裝軟件包兩個(gè)節(jié)點(diǎn)分別拷貝提供的6-4-yum.tar.gz軟件包到本地，配置完成yum環(huán)境后安裝所需要的基礎(chǔ)環(huán)境軟件包。#yuminstalldocker-ioopenvswitchbridge-utils首先拉取centos:latest鏡像到本地，完成后在清空防火墻#iptables-F#iptables-X#iptables–Z5實(shí)現(xiàn)跨主機(jī)通信修改Selinux修改selinux模式為permissive#vi/etc/selinux/configSELINUX=permissiveSELINUXTYPE=targeted重啟機(jī)器#getenforce0Enforcing#setenforce0#getenforcePermissive6實(shí)現(xiàn)跨主機(jī)通信設(shè)置內(nèi)核轉(zhuǎn)發(fā)為系統(tǒng)配置路由轉(zhuǎn)發(fā)以及反向過濾#echo1>/proc/sys/net/ipv4/ip_forward#echo'net.ipv4.ip_forward=1'>/etc/sysctl.conf#echo"net.ipv4.conf.default.rp_filter=0">>/etc/sysctl.conf#echo'net.ipv4.conf.all.rp_filter=0'>>/etc/sysctl.conf立即生效#sysctl-p7實(shí)現(xiàn)跨主機(jī)通信創(chuàng)建br-int網(wǎng)橋#brctladdbrbr-int為br-int的網(wǎng)橋配置ip地址#ifconfigbr-int172.19.64.1/24開啟br-int網(wǎng)橋#iplinksetbr-intup查看網(wǎng)橋地址ipa8實(shí)現(xiàn)跨主機(jī)通信5:br-int:<BROADCAST,MULTICAST,UP,LOWER_UP>mtu1500qdiscnoqueuestateUNKNOWNlink/etheraa:ae:19:88:7f:f9brdff:ff:ff:ff:ff:ffinet172.19.64.1/24brd172.19.64.255scopeglobalbr-int#vi/etc/sysconfig/dockerother_args="--bridge=br-int"#servicedockerrestart9在docker1上創(chuàng)建GRE接口#ovs-vsctlshow2e4e7116-38ea-41a8-b4e6-b36583d25940Bridgebr-dockerPortbr-dockerInterfacebr-dockertype:internalovs_version:"2.1.3“10在docker1上創(chuàng)建GRE接口在br-docker網(wǎng)橋上創(chuàng)建一個(gè)gre0接口，并且設(shè)置類型為gre，并設(shè)置隧道指向的地址為10.1.0.20#ovs-vsctladd-portbr-dockergre0--setinterfacegre0type=greoptions:remote_ip=10.1.0.2011在docker1上創(chuàng)建GRE接口#ovs-vsctlshow2e4e7116-38ea-41a8-b4e6-b36583d25940Bridgebr-dockerPort"gre0"Interface"gre0"type:greoptions:{remote_ip="10.1.0.20"}Portbr-dockerInterfacebr-dockertype:internalovs_version:"2.1.3"12將br-docker橋接到br-int#brctladdifbr-intbr-docker#brctlshowbridgenamebridgeidSTPenabledinterfacesbr-int8000.5ad4d5245f41nobr-dockerdocker08000.000000000000no13在br-docker網(wǎng)橋上創(chuàng)建一個(gè)gre0接口，并且設(shè)置類型為gre，并設(shè)置隧道指向的地址為10.1.0.10。#ovs-vsctladd-portbr-dockergre0--setinterfacegre0type=greoptions:remote_ip=10.1.0.10將br-docker橋接到br-int14在docker2上創(chuàng)建GRE接口#ovs-vsctlshowfaf12820-0480-4452-866b-ad228de843ceBridgebr-dockerPortbr-dockerInterfacebr-dockertype:internalPort"gre0"Interface"gre0"type:greoptions:{remote_ip="10.1.0.10"}ovs_version:"2.1.3"15#brctladdifbr-intbr-docker#brctlshowbridgenamebridgeidSTPenabledinterfacesbr-int8000.829b209d4343nobr-dockerdocker08000.000000000000no）在docker1上添加路由#iprouteadd172.19.65.0/24via10.1.0.20deveth0將br-docker橋接到br-int16添加一條從eth0指向172.19.65.0段的路由，下一跳為10.1.0.10。#iprouteadd172.19.64.0/24via10.1.0.10deveth0#iproute172.19.64.0/24via10.1.0.10deveth010.1.0.0/24deveth0protokernelscopelinksrc10.1.0.20172.19.65.0/24devbr-intprotokernelscopelinksrc172.19.65.1169.254.0.0/16deveth0scopelinkmetric1002defaultvia10.1.0.1deveth0在docker2上添加路由17測(cè)試連通然后測(cè)試是否能夠Ping通。root@55ad66f99c3c:/#ping10.1.1.2PING10.1.1.2(10.1.1.2)56(84)bytesofdata.64bytesfrom10.1.1.2:icmp_seq=1ttl=64time=0.046msroot@abe8b7390578:/#ping10.1.1.1PING10.1.1.1(10.1.1.1)56(84)bytesofdata.64bytesfrom10.1.1.1:icmp_seq=1ttl=64time=0.044ms18#dockerex