Encryption and routing mesh
The model at the heart of Libnetwork is CNM, as previously mentioned. In Swarm mode, libnetwork is built in a cluster-aware mode and supports multi-host networking without external key value stores. The overlay network fits naturally in this model. And both Data plane and Control plane encryption has been introduced. With encrypted Control Plane, routing information on VXLAN, for example, for which container has which MAC address and which IP address, is automatically secured. Also, with Routing Mesh, CNM provides a decentralized mechanism allowing you to access services from any IP of the cluster. When a request comes from the outsideand hits any node of the cluster, the traffic will be routed to a working container. ...
Get Native Docker Clustering with Swarm now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
