mirror of https://github.com/docker/cli.git
Describe an 'internal' network.
Added a description of a '--internal' network (from @neersighted). Co-authored-by: Bjorn Neergaard <bjorn.neergaard@docker.com> Signed-off-by: Rob Murray <rob.murray@docker.com>
This commit is contained in:
parent
860b4f3a7d
commit
617377c045
|
@ -184,6 +184,12 @@ $ docker network create \
|
||||||
|
|
||||||
### <a name="internal"></a> Network internal mode (--internal)
|
### <a name="internal"></a> Network internal mode (--internal)
|
||||||
|
|
||||||
|
Containers on an internal network may communicate between each other, but not
|
||||||
|
with any other network, as no default route is configured and firewall rules
|
||||||
|
are set up to drop all traffic to or from other networks. Communication with
|
||||||
|
the gateway IP address (and thus appropriately configured host services) is
|
||||||
|
possible, and the host may communicate with any container IP directly.
|
||||||
|
|
||||||
By default, when you connect a container to an `overlay` network, Docker also
|
By default, when you connect a container to an `overlay` network, Docker also
|
||||||
connects a bridge network to it to provide external connectivity. If you want
|
connects a bridge network to it to provide external connectivity. If you want
|
||||||
to create an externally isolated `overlay` network, you can specify the
|
to create an externally isolated `overlay` network, you can specify the
|
||||||
|
|
Loading…
Reference in New Issue