Skip to content

Latest commit

 

History

History
91 lines (64 loc) · 1.51 KB

configure-networking.md

File metadata and controls

91 lines (64 loc) · 1.51 KB
Raw

Configuring the Network

In this lab you will configure the network between node0 and node1 to ensure cross host connectivity. You will also ensure containers can communicate across hosts and reach the internet.

Create network routes between Docker hosts.

Cloud Shell

gcloud compute routes create default-route-10-200-0-0-24 \
  --destination-range 10.200.0.0/24 \
  --next-hop-instance node0

gcloud compute routes create default-route-10-200-1-0-24 \
  --destination-range 10.200.1.0/24 \
  --next-hop-instance node1

gcloud compute routes list

Allow access the API server

gcloud compute firewall-rules create default-allow-local-api \
  --allow tcp:8080 \
  --source-ranges 10.200.0.0/16

Getting Containers Online

By default GCE will not route traffic to the internet for the container subnet. In this section we will configure NAT to workaround the issue.

node0

gcloud compute ssh node0

sudo iptables -t nat -A POSTROUTING ! -d 10.0.0.0/8 -o ens4 -j MASQUERADE

node1

gcloud compute ssh node1

sudo iptables -t nat -A POSTROUTING ! -d 10.0.0.0/8 -o ens4 -j MASQUERADE

Validating Cross Host Container Networking

Terminal 1

gcloud compute ssh node0

sudo docker run -t -i --rm busybox /bin/sh

ip -f inet addr show eth0

Terminal 2

gcloud compute ssh node1

sudo docker run -t -i --rm busybox /bin/sh

ping -c 3 10.200.0.2

ping -c 3 google.com

Exit both busybox instances.