Explain --net=host option usage

Fixes #11630

Signed-off-by: Ankush Agarwal <ankushagarwal11@gmail.com>
This commit is contained in:
Ankush Agarwal 2015-03-28 18:32:00 -07:00 committed by Tibor Vass
parent e1cbe1c398
commit 7ac28ecb2c
1 changed files with 7 additions and 0 deletions

View File

@ -279,6 +279,13 @@ container. The container's hostname will match the hostname on the host
system. Publishing ports and linking to other containers will not work
when sharing the host's network stack.
Compared to the default `bridge` mode, the `host` mode gives *significantly*
better networking performance since it uses the host's native networking stack
wheras the bridge has to go through one level of virtualizaion through the
docker daemon. It is recommended to run containers in this mode when their
networking performance is critical, for example, a production Load Balancer
or a High Performance Web Server.
> **Note**: `--net="host"` gives the container full access to local system
> services such as D-bus and is therefore considered insecure.