Container networking in Computer Networks - Step-by-Step Execution

Concept Flow - Container networking

Container Created

↓

Assign Network Namespace

↓

Choose Network Mode

↓

Bridge Network

↓

Connect to Bridge

↓

Assign IP & Port

↓

Container Communicates

↓

Exit or Destroy Container

This flow shows how a container is created, assigned a network namespace, chooses a network mode (bridge or host), and then communicates with other containers or the host.

Execution Sample

Computer Networks

docker network create my_bridge

docker run --net=my_bridge alpine ping google.com

Creates a bridge network and runs a container connected to it, allowing network communication.

Analysis Table

Step	Action	Network Namespace	Network Mode	IP Assignment	Communication
1	Create container	New namespace created	Not assigned yet	None	No communication
2	Assign network mode	Namespace active	Bridge network selected	IP assigned from bridge subnet	Can communicate with bridge network containers
3	Container starts	Namespace active	Bridge network	IP assigned	Can ping external sites via host gateway
4	Container runs command	Namespace active	Bridge network	IP assigned	Sends ping packets to google.com
5	Container stops	Namespace removed	Network mode cleared	IP released	No communication
6	Create container	No new namespace (shares host)	Host network selected	Uses host IP	Shares host network stack
7	Container runs command	Host namespace shared	Host network	Host IP	Direct communication without isolation
8	Container stops	N/A	Network mode cleared	N/A	No communication

💡 Containers stop or are removed, network namespaces and IPs are released, ending communication.

State Tracker

Variable	Start	After Step 2	After Step 3	After Step 5	After Step 6	After Step 7	After Step 8
Network Namespace	None	Created	Active	Removed	None	Shared	N/A
Network Mode	None	Bridge	Bridge	None	Host	Host	None
IP Address	None	Assigned (bridge subnet)	Assigned	Released	Host IP	Host IP	N/A
Communication	None	With bridge containers	With external sites	None	With host network	Direct host communication	None

Key Insights - 3 Insights

Why does a container with host network mode share the host's IP address?

Because in host network mode, the container does not get its own network namespace but uses the host's network stack directly, as shown in execution_table rows 6 and 7.

What happens to the container's IP address when it stops?

The IP address is released and the network namespace is removed, so the container no longer communicates, as seen in execution_table rows 5 and 8.

How does bridge network mode isolate container networking?

Bridge mode creates a separate network namespace and assigns an IP from the bridge subnet, isolating container traffic from the host except through the bridge, as shown in execution_table rows 2 and 3.

Visual Quiz - 3 Questions

Look at the execution_table, at which step does the container start communicating with external sites?

A Step 3

B Step 2

C Step 5

D Step 7

💡 Hint

Check the 'Communication' column for when 'Can ping external sites via host gateway' appears.

According to variable_tracker, what is the network mode after Step 6?

A None

B Host

C Bridge

D Unknown

💡 Hint

Look at the 'Network Mode' row under 'After Step 6' in variable_tracker.

If the container used bridge network mode, what happens to its IP address after it stops?

A It remains assigned

B It changes to host IP

C It is released

D It becomes public IP

💡 Hint

Refer to execution_table rows 5 and 8 and variable_tracker 'IP Address' after Step 5.

Concept Snapshot

Container networking assigns network namespaces to containers.
Bridge mode isolates containers with their own IPs on a virtual network.
Host mode shares the host's network stack and IP.
Containers communicate via assigned IPs or host network.
Network resources are released when containers stop.

Full Transcript

Container networking involves creating a network namespace for each container. When a container is created, it gets its own network namespace unless host mode is selected. In bridge mode, the container is assigned an IP address from a virtual bridge network, allowing it to communicate with other containers on the same bridge and external networks through the host. In host mode, the container shares the host's network stack and IP address, so there is no isolation. When containers stop, their network namespaces and IP addresses are removed, ending their network communication. This process ensures containers can communicate securely and efficiently depending on the chosen network mode.