跨主机容器间点到点连接实战

跨主机容器间点到点连接实战2实战描述实现跨主机通信目录3实战描述部署两台Docker虚拟机，并且分别安装Docker环境，两套环境内均分别启动容器，分别绑定到各自的网桥中，最终实现两个容器之间的连通。4实现跨主机通信安装软件包两个节点分别拷贝提供的6-4-yum.tar.gz软件包到本地，配置完成yum环境后安装所需要的基础环境软件包。#yuminstalldocker-ioopenvswitchbridge-utils首先拉取centos:latest镜像到本地，完成后在清空防火墙#iptables-F#iptables-X#iptables–Z5实现跨主机通信修改Selinux修改selinux模式为permissive#vi/etc/selinux/configSELINUX=permissiveSELINUXTYPE=targeted重启机器#getenforce0Enforcing#setenforce0#getenforcePermissive6实现跨主机通信设置内核转发为系统配置路由转发以及反向过滤#echo1>/proc/sys/net/ipv4/ip_forward#echo'net.ipv4.ip_forward=1'>/etc/sysctl.conf#echo"net.ipv4.conf.default.rp_filter=0">>/etc/sysctl.conf#echo'net.ipv4.conf.all.rp_filter=0'>>/etc/sysctl.conf立即生效#sysctl-p7实现跨主机通信创建br-int网桥#brctladdbrbr-int为br-int的网桥配置ip地址#ifconfigbr-int172.19.64.1/24开启br-int网桥#iplinksetbr-intup查看网桥地址ipa8实现跨主机通信5:br-int:<BROADCAST,MULTICAST,UP,LOWER_UP>mtu1500qdiscnoqueuestateUNKNOWNlink/etheraa:ae:19:88:7f:f9brdff:ff:ff:ff:ff:ffinet172.19.64.1/24brd172.19.64.255scopeglobalbr-int#vi/etc/sysconfig/dockerother_args="--bridge=br-int"#servicedockerrestart9在docker1上创建GRE接口#ovs-vsctlshow2e4e7116-38ea-41a8-b4e6-b36583d25940Bridgebr-dockerPortbr-dockerInterfacebr-dockertype:internalovs_version:"2.1.3“10在docker1上创建GRE接口在br-docker网桥上创建一个gre0接口，并且设置类型为gre，并设置隧道指向的地址为10.1.0.20#ovs-vsctladd-portbr-dockergre0--setinterfacegre0type=greoptions:remote_ip=10.1.0.2011在docker1上创建GRE接口#ovs-vsctlshow2e4e7116-38ea-41a8-b4e6-b36583d25940Bridgebr-dockerPort"gre0"Interface"gre0"type:greoptions:{remote_ip="10.1.0.20"}Portbr-dockerInterfacebr-dockertype:internalovs_version:"2.1.3"12将br-docker桥接到br-int#brctladdifbr-intbr-docker#brctlshowbridgenamebridgeidSTPenabledinterfacesbr-int8000.5ad4d5245f41nobr-dockerdocker08000.000000000000no13在br-docker网桥上创建一个gre0接口，并且设置类型为gre，并设置隧道指向的地址为10.1.0.10。#ovs-vsctladd-portbr-dockergre0--setinterfacegre0type=greoptions:remote_ip=10.1.0.10将br-docker桥接到br-int14在docker2上创建GRE接口#ovs-vsctlshowfaf12820-0480-4452-866b-ad228de843ceBridgebr-dockerPortbr-dockerInterfacebr-dockertype:internalPort"gre0"Interface"gre0"type:greoptions:{remote_ip="10.1.0.10"}ovs_version:"2.1.3"15#brctladdifbr-intbr-docker#brctlshowbridgenamebridgeidSTPenabledinterfacesbr-int8000.829b209d4343nobr-dockerdocker08000.000000000000no）在docker1上添加路由#iprouteadd172.19.65.0/24via10.1.0.20deveth0将br-docker桥接到br-int16添加一条从eth0指向172.19.65.0段的路由，下一跳为10.1.0.10。#iprouteadd172.19.64.0/24via10.1.0.10deveth0#iproute172.19.64.0/24via10.1.0.10deveth010.1.0.0/24deveth0protokernelscopelinksrc10.1.0.20172.19.65.0/24devbr-intprotokernelscopelinksrc172.19.65.1169.254.0.0/16deveth0scopelinkmetric1002defaultvia10.1.0.1deveth0在docker2上添加路由17测试连通然后测试是否能够Ping通。root@55ad66f99c3c:/#ping10.1.1.2PING10.1.1.2(10.1.1.2)56(84)bytesofdata.64bytesfrom10.1.1.2:icmp_seq=1ttl=64time=0.046msroot@abe8b7390578:/#ping10.1.1.1PING10.1.1.1(10.1.1.1)56(84)bytesofdata.64bytesfrom10.1.1.1:icmp_seq=1ttl=64time=0.044ms18#dockerex