Overlay networks in Swarm in Docker - Step-by-Step Execution

Process Flow - Overlay networks in Swarm

Create Swarm Cluster

↓

Create Overlay Network

↓

Deploy Services

↓

Services Join Overlay Network

↓

Containers Communicate Across Hosts

↓

Network Traffic Routed Securely

↓

End

This flow shows how a Docker Swarm cluster uses overlay networks to connect services across multiple hosts securely.

Execution Sample

Docker

docker swarm init

docker network create -d overlay my_overlay

docker service create --name web --network my_overlay nginx

docker service create --name db --network my_overlay mysql

This code initializes a swarm, creates an overlay network, and deploys two services connected to that network.

Process Table

Step	Command	Action	Result/State Change
1	docker swarm init	Initialize swarm mode on current node	Node becomes manager in swarm cluster
2	docker network create -d overlay my_overlay	Create overlay network named 'my_overlay'	Overlay network 'my_overlay' created and ready for services
3	docker service create --name web --network my_overlay nginx	Deploy 'web' service attached to 'my_overlay'	Service 'web' running; containers join overlay network
4	docker service create --name db --network my_overlay mysql	Deploy 'db' service attached to 'my_overlay'	Service 'db' running; containers join overlay network
5	Service containers start	Containers on different swarm nodes join 'my_overlay'	Containers can communicate securely across hosts via overlay network
6	Network traffic routing	Swarm routes packets between containers over encrypted VXLAN tunnels	Cross-host container communication established
7	End	All services connected via overlay network	Swarm overlay network operational

💡 All services deployed and connected via overlay network; cross-host communication enabled

Status Tracker

Variable	Start	After Step 1	After Step 2	After Step 3	After Step 4	Final
Swarm Mode	Disabled	Enabled	Enabled	Enabled	Enabled	Enabled
Overlay Network 'my_overlay'	None	None	Created	Created	Created	Created
Service 'web'	None	None	Running	Running	Running	Running
Service 'db'	None	None	None	Running	Running	Running
Containers on Overlay	None	None	None	Joined	Joined	Joined

Key Moments - 3 Insights

Why do containers on different hosts communicate even though they are on separate machines?

Because the overlay network creates a virtual network that spans all swarm nodes, allowing containers to communicate as if on the same network (see execution_table step 5).

What happens if you try to deploy a service without specifying the overlay network?

The service will use the default bridge network, which does not span multiple hosts, so containers on different nodes cannot communicate (not shown in execution_table but implied by step 3 and 4).

How does Docker Swarm secure the network traffic between containers on different hosts?

Swarm uses encrypted VXLAN tunnels to route traffic securely between containers across hosts (see execution_table step 6).

Visual Quiz - 3 Questions

Look at the execution table, at which step is the overlay network created?

A Step 2

B Step 3

C Step 1

D Step 4

💡 Hint

Check the 'Action' column for the command that creates the overlay network.

According to the variable tracker, when does the 'web' service start running?

A After Step 4

B After Step 2

C After Step 3

D At Start

💡 Hint

Look at the 'Service web' row and see when its state changes to 'Running'.

If the overlay network was not created, what would happen to container communication across hosts?

A Containers would communicate normally

B Containers could not communicate across hosts

C Containers would communicate but insecurely

D Containers would crash

💡 Hint

Refer to key moment about network communication and overlay network role.

Concept Snapshot

Docker Swarm Overlay Networks:
- Use 'docker network create -d overlay <name>' to create.
- Overlay networks span multiple swarm nodes.
- Services attach with '--network <name>' to communicate.
- Traffic is routed securely via encrypted tunnels.
- Enables multi-host container communication in swarm.

Full Transcript

This visual execution shows how Docker Swarm uses overlay networks to connect containers across multiple hosts. First, swarm mode is initialized on a node. Then, an overlay network named 'my_overlay' is created. Next, two services, 'web' and 'db', are deployed and attached to this overlay network. As containers start on different swarm nodes, they join the overlay network, enabling them to communicate securely across hosts. Docker Swarm routes network traffic using encrypted VXLAN tunnels, ensuring secure communication. The variable tracker shows the state changes of swarm mode, network creation, service deployment, and container joining. Key moments clarify why overlay networks enable cross-host communication and how security is maintained. The quiz tests understanding of when the network is created, when services start, and the importance of the overlay network for communication.