Container networking in Computer Networks - Practice Problems & Coding Challenges

Challenge - 5 Problems

🧠 Conceptual

intermediate

Understanding Container Network Isolation

Which statement best describes how container networking isolates containers from the host system?

A Containers use separate network namespaces, providing isolated network stacks distinct from the host and other containers.

B Containers share the host's network stack without any isolation, allowing direct access to all host network interfaces.

C Containers use virtual machines to isolate their network, completely separate from the host's network stack.

D Containers rely on physical network cards dedicated to each container for network isolation.

💡 Hint

Think about how containers keep their network separate but still lightweight compared to virtual machines.

Containers use network namespaces to create isolated network environments. This means each container has its own network stack, IP addresses, and routing tables separate from the host and other containers.

📋 Factual

intermediate

Default Docker Bridge Network Characteristics

What is a key characteristic of the default bridge network created by Docker for containers?

A It creates a private internal network where containers can communicate using private IPs but are isolated from the host network by default.

B It assigns containers IP addresses from the host's physical network directly.

C It disables all container-to-container communication by default.

D It requires manual configuration of IP addresses for each container.

💡 Hint

Consider how containers communicate with each other and the host when using the default network.

The default Docker bridge network creates a private subnet for containers. Containers get private IPs and can talk to each other, but they are isolated from the host's physical network unless ports are explicitly published.

🔍 Analysis

advanced

Analyzing Container Port Mapping Behavior

Given a container running a web server on port 80, which Docker command option correctly maps the container's port 80 to port 8080 on the host?

A docker run --port 8080:80 mywebserver

B docker run -p 80:8080 mywebserver

C docker run -p 8080:80 mywebserver

D docker run -P 8080:80 mywebserver

💡 Hint

Remember the syntax for Docker port mapping is hostPort:containerPort.

The correct syntax is -p hostPort:containerPort. To expose container port 80 on host port 8080, use -p 8080:80.

❓ Comparison

advanced

Comparing Container Network Drivers

Which container network driver allows containers to be directly connected to the host's network stack, sharing the host's IP address?

A bridge

B macvlan

C overlay

D host

💡 Hint

Think about which driver removes network isolation between container and host.

The host network driver makes the container use the host's network stack directly, sharing the host's IP address and ports.

❓ Reasoning

expert

Troubleshooting Container Network Connectivity

A container cannot reach an external website, but the host machine can. The container uses the default bridge network. What is the most likely cause?

A The container's CPU limits are too low, causing network delays.

B The container's DNS settings are incorrect or missing, preventing domain name resolution.

C The container is using the host network driver, which blocks external access by default.

D The container's filesystem is read-only, blocking network connections.

💡 Hint

Consider what is needed for a container to translate website names into IP addresses.

Containers on the default bridge network rely on DNS to resolve domain names. If DNS settings are missing or incorrect, the container cannot reach external websites even if the host can.

Practice

1. What is the main purpose of container networking?

easy

A. To manage container CPU usage

B. To allow containers to communicate and share data

C. To store container images

D. To create user accounts inside containers

Solution

1. Step 1: Understand container networking basics

   Container networking connects containers so they can communicate and share data or services.

2. Step 2: Identify the main purpose

   Other options relate to storage, CPU, or user management, which are not networking functions.

3. Final Answer:

   To allow containers to communicate and share data -> Option B

4. Quick Check:

   Container networking = communication and data sharing [OK]

Hint: Networking means connecting containers to talk [OK]

Common Mistakes:

• Confusing networking with storage or CPU management
• Thinking networking creates user accounts
• Assuming networking manages container images

2. Which of the following is a default network type used in container platforms like Docker?

easy

A. Bridge network

B. Cloud network

C. VPN network

D. Overlay network

Solution

1. Step 1: Recall default network types in container platforms

   Docker and similar platforms use bridge, host, and none as default network types.

2. Step 2: Identify the correct default network

   Bridge network is the common default for container communication on a single host.

3. Final Answer:

   Bridge network -> Option A

4. Quick Check:

   Default network in Docker = Bridge [OK]

Hint: Bridge is the default container network type [OK]

Common Mistakes:

• Confusing overlay with default (overlay is user-defined)
• Thinking VPN or cloud networks are default
• Mixing host network with VPN

3. Consider the following Docker command: docker network create --driver overlay my_overlay. What is the main use of this network?

medium

A. Create a network for host-only communication

B. Connect containers on the same host only

C. Isolate containers from all networks

D. Connect containers across multiple hosts

Solution

1. Step 1: Understand the overlay network driver

   Overlay networks allow containers on different hosts to communicate securely.

2. Step 2: Analyze the command purpose

   The command creates an overlay network named 'my_overlay' for multi-host container communication.

3. Final Answer:

   Connect containers across multiple hosts -> Option D

4. Quick Check:

   Overlay network = multi-host container communication [OK]

Hint: Overlay networks span multiple hosts [OK]

Common Mistakes:

• Assuming overlay works only on one host
• Confusing overlay with bridge network
• Thinking overlay isolates containers

4. A user tries to connect two containers on different hosts using a bridge network but fails. What is the likely cause?

medium

A. Containers must be on the same host to use overlay networks

B. Host network driver is required for multi-host

C. Bridge networks do not support multi-host communication

D. Containers need different IP addresses to communicate

Solution

1. Step 1: Understand bridge network limitations

   Bridge networks only connect containers on the same host.

2. Step 2: Identify the cause of failure

   Trying to connect containers on different hosts with bridge network fails because it doesn't support multi-host communication.

3. Final Answer:

   Bridge networks do not support multi-host communication -> Option C

4. Quick Check:

   Bridge network = single host only [OK]

Hint: Bridge = single host only, use overlay for multi-host [OK]

Common Mistakes:

• Thinking overlay networks require same host
• Believing host network driver enables multi-host
• Assuming IP address difference causes failure

5. You want to securely connect multiple containers running on different hosts in a cluster, ensuring encrypted communication and easy scaling. Which container network type should you choose?

hard

A. Overlay network

B. Bridge network

C. Host network

D. None network

Solution

1. Step 1: Analyze requirements for multi-host secure communication

   Connecting containers across hosts with encryption and scalability needs overlay networks.

2. Step 2: Compare network types

   Host network shares host's network stack (no isolation), bridge is single host only, none disables networking.

3. Step 3: Confirm overlay network features

   Overlay networks provide encrypted, scalable multi-host container communication.

4. Final Answer:

   Overlay network -> Option A

5. Quick Check:

   Secure multi-host container communication = Overlay network [OK]

Hint: Overlay networks secure multi-host container clusters [OK]

Common Mistakes:

• Choosing host network which lacks isolation
• Using bridge network for multi-host
• Selecting none network disables communication