Use host networking and additional networks in docker compose

Question

I'm trying to set up a dev environment for my project.

I have a container (ms1) which should be put in his own network ("services" in my case), and a container (apigateway) which should access that network while exposing an http port to the host's network.

Ideally my docker compose file would look like this:

version: '2'
services:
    ms1:
        expose:
            - "13010"
        networks:
            services:
                aliases:
                    - ms1
   apigateway:
        networks:
            services:
                aliases:
                    - api
        network_mode: "host"
networks:
    services:

docker-compose doesn't allow to use network_mode and networks at the same time.

Do I have other alternatives?

At the moment I'm using this:

   apigateway:
        networks:
            services:
                aliases:
                    - api
        ports:
            - "127.0.0.1:10000:13010"

and then apigateway container listens on 0.0.0.0:13010. It works but it is slow and it freezes if the host's internet connection goes down.

Also, I'm planning on using vagrant in the future upon docker, does it allow to solve in a clean way?

Can you just use an IP address of ms1 from apigateway? See https://stackoverflow.com/questions/27937185/assign-static-ip-to-docker-container how to do it with docker 1.10.1 — Igor Bukanov, Mar 22 '16 at 07:22
I am trying to do the same but to solve a different problem (maybe). In my case I created a network shared between two services but for some reason, one of the services was not connected to the internet (I thought the reason was it was not part of the host network). However, the problem was it couldn't resolve URLs because not being able to reach a DNS. I did a quickfix using IP addresses but will look at it thoroughly to forward the request to the right DNS. — omrsin, Jun 23 '16 at 08:26

score 1 · Answer 1 · answered Nov 26 '17 at 23:16

expose in docker-compose does not publish the port on the host. Since you probably don't need service linking anymore (instead you should rely on Docker networks as you do already), the option has limited value in general and seems to provide no value at all to you in your scenario.

I suspect you've come to using it by mistake and after realizing that it didn't seem to have any effect by itself, stumbled upon the fact that using the host network driver would "make it work". This had nothing to do with the expose property, mind you. It's just that the host network driver lets contained processes bind to the host network interface directly. Thanks to this, you could reach the API gateway process from the outside. You could remove the expose property and it would still work.

If this is the only reason why you picked the host network driver, then you've fallen victim of the X-Y problem:

(tl;dr) You should never need to use the host network driver in normal situations, the default bridge network driver works just fine. What you're looking for is the ports property, not expose. This sets up the appropriate port forwarding behind the scenes.

score 0 · Answer 2 · answered Feb 09 '17 at 19:23

In docker 1.13 you should be able to create a service to bridge between the two networks. I'm using something similar to fix another problem and I think this could also help here:

docker service create \
--name proxy \
--network proxy \
--publish mode=host,target=80,published=80 \
--publish mode=host,target=443,published=443 \
--constraint 'node.hostname == myproxynode' \
--replicas 1 \
letsnginx

Plup · Answer 3 · 2017-01-05T14:27:20.517

-1

I would try this :

1/ Find the host network docker network ls

2/ Use this dockercompose file

     services:
          ms1:
              ports:
                  - "13010"
              networks:
                  - service
          apigateway:
              networks:
                  - front
                  - service

      networks:
          front:
          service:
              external:
                  name: "<ID of the network>"

edited Jan 05 '17 at 14:27

answered Jul 11 '16 at 03:36

Plup

750
1
6
13

When I try to create a host network using the command above I get this error `Error response from daemon: only one instance of "host" network is allowed` – disrvptor Jan 05 '17 at 04:28
So you could use the one already existing. I updated my answer but I'm not in capacity to test it. – Plup Jan 05 '17 at 14:28

Use host networking and additional networks in docker compose

3 Answers3