4 ms·
Bonus round: > For most purposes, the main interesting thing that Docker containers provide is isolated networking. [...] What else prevents applications from
by majewsky 8y ago
Bonus round:
> For most purposes, the main interesting thing that Docker containers provide is isolated networking. [...] What else prevents applications from using ports? The firewall that you already have installed on your server. Again, pointless abstraction to address already-solved problems.
Comically missing the point.
- geggam 8y agountil you realize the firewall is the same iptables that you use to isolate the network in docker containers
- ecnahc515 8y agoNot at all. IP tables is used to route traffic between containers, yes, but the isolation is done by network namespaces.
- geggam 8y agoInteresting... so you create a network and isolate it from the rest of the network ? How do your applications serve traffic ? Or... you create a network with namespaces and use iptables aka the firewall to network that to the other networks you created with namespaces ? Think about it logically... when you use TCP you share the connections... your namespace isolation is exposed by the very thing that firewalls it... make sense ?