mirror of
https://github.com/moby/moby.git
synced 2026-08-12 12:15:08 +00:00
bf251c33d0
When a container sends a packet to one of its own published ports on the host, it's normally picked up by the userland proxy and sent back. When the userland proxy is disabled, a masquerade rule is needed in order for responses to the container to have the host's source address. The masquerade rule matches the container's address as source and dest, and the published port as the dest. It's only used for the no-proxy case. So, when the userland proxy is enabled, don't create the masquerade rule. Signed-off-by: Rob Murray <rob.murray@docker.com>
libnetwork - networking for containers
Libnetwork provides a native Go implementation for connecting containers
The goal of libnetwork is to deliver a robust Container Network Model that provides a consistent programming interface and the required network abstractions for applications.
Design
Please refer to the design for more information.
Using libnetwork
There are many networking solutions available to suit a broad range of use-cases. libnetwork uses a driver / plugin model to support all of these solutions while abstracting the complexity of the driver implementations by exposing a simple and consistent Network Model to users.
Contributing
Want to hack on libnetwork? Docker's contributions guidelines apply.
Copyright and license
Code and documentation copyright 2015 Docker, inc. Code released under the Apache 2.0 license. Docs released under Creative commons.