首页 文章

Docker Swarm容器可以访问虽然端口没有打开?

提问于
浏览
2

我按照这些说明here构建了一个3节点Docker Swarm集群 .

在开始时,我用 ufw 打开了多个端口,以便在docker节点之间进行通信:

# ufw status verbose
Status: active
Logging: on (low)
Default: deny (incoming), allow (outgoing), deny (routed)
New profiles: skip

To                         Action      From
--                         ------      ----
22/tcp                     ALLOW IN    Anywhere                  
2376/tcp                   ALLOW IN    Anywhere                  
2377/tcp                   ALLOW IN    Anywhere                  
7946/tcp                   ALLOW IN    Anywhere                  
7946/udp                   ALLOW IN    Anywhere                  
4789/udp                   ALLOW IN    Anywhere                  
22/tcp (v6)                ALLOW IN    Anywhere (v6)             
2376/tcp (v6)              ALLOW IN    Anywhere (v6)             
2377/tcp (v6)              ALLOW IN    Anywhere (v6)             
7946/tcp (v6)              ALLOW IN    Anywhere (v6)             
7946/udp (v6)              ALLOW IN    Anywhere (v6)             
4789/udp (v6)              ALLOW IN    Anywhere (v6)

如您所见,端口80是 not 打开 .

因此,在本教程结束时,我将官方nginx docker镜像部署到了集群:

docker service create -p 80:80 --name webserver nginx

我能够输入我的服务器的IP地址,并呈现了nginx hello world页面 .

现在我想知道,为什么我能够访问网络服务器虽然端口80没有打开?

1 回答

  • 2

    Docker自己设置iptables规则,干扰UFW .
    尝试使用附加命令行选项 --iptables=false 运行docker守护程序 .

相关问题