我按照这些说明here构建了一个3节点Docker Swarm集群 .
在开始时,我用 ufw
打开了多个端口,以便在docker节点之间进行通信:
# ufw status verbose
Status: active
Logging: on (low)
Default: deny (incoming), allow (outgoing), deny (routed)
New profiles: skip
To Action From
-- ------ ----
22/tcp ALLOW IN Anywhere
2376/tcp ALLOW IN Anywhere
2377/tcp ALLOW IN Anywhere
7946/tcp ALLOW IN Anywhere
7946/udp ALLOW IN Anywhere
4789/udp ALLOW IN Anywhere
22/tcp (v6) ALLOW IN Anywhere (v6)
2376/tcp (v6) ALLOW IN Anywhere (v6)
2377/tcp (v6) ALLOW IN Anywhere (v6)
7946/tcp (v6) ALLOW IN Anywhere (v6)
7946/udp (v6) ALLOW IN Anywhere (v6)
4789/udp (v6) ALLOW IN Anywhere (v6)
如您所见,端口80是 not 打开 .
因此,在本教程结束时,我将官方nginx docker镜像部署到了集群:
docker service create -p 80:80 --name webserver nginx
我能够输入我的服务器的IP地址,并呈现了nginx hello world页面 .
现在我想知道,为什么我能够访问网络服务器虽然端口80没有打开?
1 回答
Docker自己设置iptables规则,干扰UFW .
尝试使用附加命令行选项
--iptables=false
运行docker守护程序 .