Overlay networks in Swarm in Docker - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is an overlay network in Docker Swarm?

An overlay network is a virtual network that allows containers running on different Docker hosts to communicate securely as if they were on the same local network.

beginner

How does Docker Swarm use overlay networks?

Docker Swarm uses overlay networks to connect services across multiple nodes, enabling containers in a service to communicate regardless of the host they run on.

beginner

Which command creates an overlay network in Docker Swarm?

The command is docker network create -d overlay my_overlay_network. This creates a new overlay network named 'my_overlay_network'.

intermediate

Why are overlay networks important in a Docker Swarm cluster?

Overlay networks allow containers on different physical or virtual machines to communicate securely and easily, which is essential for distributed applications running in Swarm.

intermediate

What role does the Docker Swarm control plane play in overlay networks?

The control plane manages the creation and maintenance of overlay networks, handling the routing and encryption of traffic between nodes in the cluster.

What driver is used to create an overlay network in Docker Swarm?

A overlay

B bridge

C host

D macvlan

The overlay driver is used to create networks that span multiple Docker hosts in a Swarm cluster.

Which command lists all networks including overlay networks in Docker?

A docker network list

B docker network show

C docker network inspect

D docker network ls

The command 'docker network ls' lists all networks available on the Docker host, including overlay networks.

Overlay networks in Docker Swarm encrypt traffic between nodes by default?

A Only if enabled manually

B False

C True

D Only for bridge networks

Overlay networks in Docker Swarm do not encrypt traffic between nodes by default. Encryption can be enabled using the --opt encrypted option.

Can containers on the same Docker host communicate over an overlay network?

A Only if containers are in the same service

B No, only bridge networks allow local communication

C Yes, overlay networks work across hosts and locally

D Only if manually connected

Overlay networks allow communication between containers on the same host and across different hosts.

What is required before creating an overlay network in Docker Swarm?

A Containers must be running

B Docker Swarm mode must be initialized

C A bridge network must exist

D Docker must be installed on a single host

Overlay networks require Docker Swarm mode to be active because they span multiple nodes in a cluster.

Explain how overlay networks enable communication between containers in a Docker Swarm cluster.

Think about how containers on different machines talk to each other as if they were on the same network.

Describe the steps to create and use an overlay network in Docker Swarm.

Start from setting up Swarm, then create the network, and finally use it with services.

Practice

1. What is the main purpose of an overlay network in Docker Swarm?

easy

A. To provide a graphical interface for managing containers

B. To isolate containers within the same host only

C. To store container logs centrally

D. To enable communication between containers on different Docker hosts

Solution

1. Step 1: Understand overlay network function

   An overlay network connects containers running on different Docker hosts, allowing them to communicate as if on the same network.

2. Step 2: Compare options

   Options A, B, and D describe other features unrelated to overlay networks. Only To enable communication between containers on different Docker hosts correctly describes the main purpose.

3. Final Answer:

   To enable communication between containers on different Docker hosts -> Option D

4. Quick Check:

   Overlay network = cross-host container communication [OK]

Hint: Overlay networks connect containers across hosts, not just one host [OK]

Common Mistakes:

• Thinking overlay networks only work on one host
• Confusing overlay networks with logging or UI features
• Assuming overlay networks isolate containers instead of connecting them

2. Which command correctly creates an overlay network named mynetwork in Docker Swarm?

easy

A. docker network create --driver overlay mynetwork

B. docker network create --driver bridge mynetwork

C. docker swarm network create mynetwork

D. docker create network overlay mynetwork

Solution

1. Step 1: Identify correct command syntax

   The correct syntax to create an overlay network is docker network create --driver overlay [name].

2. Step 2: Evaluate options

   docker network create --driver bridge mynetwork uses the bridge driver, not overlay. docker swarm network create mynetwork is invalid syntax. docker create network overlay mynetwork is incorrect command order. Only docker network create --driver overlay mynetwork is correct.

3. Final Answer:

   docker network create --driver overlay mynetwork -> Option A

4. Quick Check:

   Correct overlay network creation uses --driver overlay [OK]

Hint: Use 'docker network create --driver overlay' to create overlay networks [OK]

Common Mistakes:

• Using bridge driver instead of overlay
• Incorrect command order or missing 'network' keyword
• Confusing swarm commands with network commands

3. Given the following Docker Swarm overlay network creation command:

docker network create -d overlay --attachable mynet

What does the --attachable flag do?

medium

A. Limits the network to only swarm services

B. Prevents services from using the network

C. Allows standalone containers to connect to the overlay network

D. Automatically attaches volumes to containers

Solution

1. Step 1: Understand the --attachable flag

   The --attachable flag allows standalone containers (not part of swarm services) to connect to the overlay network.

2. Step 2: Analyze options

   Prevents services from using the network is false because it does not prevent services. Limits the network to only swarm services is opposite of what attachable does. Automatically attaches volumes to containers is unrelated to networks.

3. Final Answer:

   Allows standalone containers to connect to the overlay network -> Option C

4. Quick Check:

   --attachable = standalone container access [OK]

Hint: Attachable lets normal containers join overlay networks [OK]

Common Mistakes:

• Thinking --attachable restricts network to swarm services
• Confusing attachable with volume or storage options
• Assuming it disables service connections

4. You created an overlay network with:

docker network create -d overlay mynet

But when you try to connect a standalone container using docker run --net mynet, it fails. What is the likely cause?

medium

A. The overlay network was not created with the --attachable flag

B. The container image is incompatible with overlay networks

C. Docker Swarm mode is not initialized

D. The container must be part of a service to use overlay networks

Solution

1. Step 1: Identify overlay network usage for standalone containers

   Standalone containers can only connect to overlay networks if the network was created with --attachable.

2. Step 2: Evaluate other options

   The container image is incompatible with overlay networks is incorrect; container images do not affect network connection. Docker Swarm mode is not initialized is unrelated if network was created. The container must be part of a service to use overlay networks is false because attachable networks allow standalone containers.

3. Final Answer:

   The overlay network was not created with the --attachable flag -> Option A

4. Quick Check:

   Standalone container needs --attachable network [OK]

Hint: Add --attachable to overlay network for standalone containers [OK]

Common Mistakes:

• Ignoring the need for --attachable flag
• Blaming container image compatibility
• Assuming all overlay networks allow standalone containers

5. You want to deploy a multi-host Docker Swarm service that uses an overlay network named swarmnet. You also want to allow some standalone containers to join this network for debugging. Which sequence of commands correctly sets this up?

hard

A. docker network create -d overlay swarmnetdocker service create --network swarmnet myservice

B. docker network create -d overlay --attachable swarmnetdocker service create --network swarmnet myservice

C. docker network create -d bridge --attachable swarmnetdocker service create --network swarmnet myservice

D. docker network create --driver overlay swarmnetdocker run --net swarmnet myservice

Solution

1. Step 1: Create overlay network with attachable flag

   To allow standalone containers to join, the overlay network must be created with --attachable.

2. Step 2: Deploy service on the created network

   Use docker service create --network swarmnet myservice to deploy the service on the overlay network.

3. Step 3: Analyze options

   docker network create -d overlay swarmnet
   docker service create --network swarmnet myservice misses --attachable, so standalone containers cannot join. docker network create -d bridge --attachable swarmnet
   docker service create --network swarmnet myservice uses bridge driver, which is not multi-host. docker network create --driver overlay swarmnet
   docker run --net swarmnet myservice tries to run a service as a container, which is incorrect.

4. Final Answer:

   docker network create -d overlay --attachable swarmnet and docker service create --network swarmnet myservice -> Option B

5. Quick Check:

   Attachable overlay network + service create = correct setup [OK]

Hint: Use --attachable overlay network for standalone container access [OK]

Common Mistakes:

• Omitting --attachable flag for standalone containers
• Using bridge driver for multi-host networking
• Confusing service create with container run commands