0

In the container: 1. result of command: netstat -tunlp

[root@hadoop0 bin]# netstat -tunlp
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name    
tcp        0      0 192.168.1.10:8032       0.0.0.0:*               LISTEN      525/java            
tcp        0      0 192.168.1.10:8033       0.0.0.0:*               LISTEN      525/java            
tcp        0      0 192.168.1.10:9000       0.0.0.0:*               LISTEN      148/java            
tcp        0      0 192.168.1.10:50090      0.0.0.0:*               LISTEN      350/java            
tcp        0      0 0.0.0.0:50070           0.0.0.0:*               LISTEN      148/java            
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      1/sshd              
tcp        0      0 192.168.1.10:8088       0.0.0.0:*               LISTEN      525/java            
tcp        0      0 192.168.1.10:8030       0.0.0.0:*               LISTEN      525/java            
tcp        0      0 192.168.1.10:8031       0.0.0.0:*               LISTEN      525/java            
tcp6       0      0 :::22                   :::*                    LISTEN      1/sshd              
[root@hadoop0 bin]# 
  1. command: ip a

[root@hadoop0 bin]#

[root@hadoop0 bin]# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
9: eth0@if10: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default 
    link/ether 02:42:ac:11:00:04 brd ff:ff:ff:ff:ff:ff link-netnsid 0
    inet 172.17.0.4/16 brd 172.17.255.255 scope global eth0
       valid_lft forever preferred_lft forever
12: eth1@if13: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether c2:7a:ef:9e:85:52 brd ff:ff:ff:ff:ff:ff link-netnsid 0
    inet 192.168.1.10/24 brd 192.168.1.255 scope global eth1
       valid_lft forever preferred_lft forever

networking configuration related information in the result of 'docker inspect' is as below:

"HostConfig": {
        "Binds": null,
        "ContainerIDFile": "",
        "LogConfig": {
            "Type": "json-file",
            "Config": {}
        },
        "NetworkMode": "default",
        "PortBindings": {
            "10020/tcp": [
                {
                    "HostIp": "",
                    "HostPort": "10020"
                }
            ],
            "19888/tcp": [
                {
                    "HostIp": "",
                    "HostPort": "19888"
                }
            ],
            "50090/tcp": [
                {
                    "HostIp": "",
                    "HostPort": "50090"
                }
            ],
            "8081/tcp": [
                {
                    "HostIp": "",
                    "HostPort": "8081"
                }
            ],
            "8088/tcp": [
                {
                    "HostIp": "",
                    "HostPort": "8088"
                }
            ],
            "8989/tcp": [
                {
                    "HostIp": "",
                    "HostPort": "8989"
                }
            ],
            "9000/tcp": [
                {
                    "HostIp": "",
                    "HostPort": "9000"
                }
            ]
        },

"NetworkSettings": {
        "Bridge": "",
        "SandboxID": "0033e62a6507139e9f51cdb3210fdbccd4355f4aabc3ff26e58f4a2030490e14",
        "HairpinMode": false,
        "LinkLocalIPv6Address": "",
        "LinkLocalIPv6PrefixLen": 0,
        "Ports": {
            "10020/tcp": [
                {
                    "HostIp": "0.0.0.0",
                    "HostPort": "10020"
                }
            ],
            "19888/tcp": [
                {
                    "HostIp": "0.0.0.0",
                    "HostPort": "19888"
                }
            ],
            "22/tcp": [
                {
                    "HostIp": "0.0.0.0",
                    "HostPort": "32771"
                }
            ],
            "50070/tcp": [
                {
                    "HostIp": "0.0.0.0",
                    "HostPort": "32770"
                }
            ],
            "50090/tcp": [
                {
                    "HostIp": "0.0.0.0",
                    "HostPort": "50090"
                }
            ],
            "8081/tcp": [
                {
                    "HostIp": "0.0.0.0",
                    "HostPort": "8081"
                }
            ],
            "8088/tcp": [
                {
                    "HostIp": "0.0.0.0",
                    "HostPort": "8088"
                }
            ],
            "8989/tcp": [
                {
                    "HostIp": "0.0.0.0",
                    "HostPort": "8989"
                }
            ],
            "9000/tcp": [
                {
                    "HostIp": "0.0.0.0",
                    "HostPort": "9000"
                }
            ]
        },
        "SandboxKey": "/var/run/docker/netns/0033e62a6507",
        "SecondaryIPAddresses": null,
        "SecondaryIPv6Addresses": null,
        "EndpointID": "f7201660aee774db11a39a1713844fd841b7e6ce7732fd62bf7b907f6dc40f61",
        "Gateway": "172.17.0.1",
        "GlobalIPv6Address": "",
        "GlobalIPv6PrefixLen": 0,
        "IPAddress": "172.17.0.4",
        "IPPrefixLen": 16,
        "IPv6Gateway": "",
        "MacAddress": "02:42:ac:11:00:04",
        "Networks": {
            "bridge": {
                "IPAMConfig": null,
                "Links": null,
                "Aliases": null,
                "NetworkID": "60c9d4c148f424ccbf7895a1e36cfd7c9aec2696bc17f6224c02fecad1c672b5",
                "EndpointID": "f7201660aee774db11a39a1713844fd841b7e6ce7732fd62bf7b907f6dc40f61",
                "Gateway": "172.17.0.1",
                "IPAddress": "172.17.0.4",
                "IPPrefixLen": 16,
                "IPv6Gateway": "",
                "GlobalIPv6Address": "",
                "GlobalIPv6PrefixLen": 0,
                "MacAddress": "02:42:ac:11:00:04",
                "DriverOpts": null
            }
        }
    }

On the host:

[root@192-168-2-70 ~]# docker ps
CONTAINER ID        IMAGE               COMMAND               CREATED             STATUS              PORTS                                                                                                                                                                                                                           NAMES
f940bc213258        a5e442e69031        "/usr/sbin/sshd -D"   9 days ago          Up 2 hours          0.0.0.0:8081->8081/tcp, 0.0.0.0:8088->8088/tcp, 0.0.0.0:8989->8989/tcp, 0.0.0.0:9000->9000/tcp, 0.0.0.0:10020->10020/tcp, 0.0.0.0:19888->19888/tcp, 0.0.0.0:50090->50090/tcp, 0.0.0.0:32771->22/tcp, 0.0.0.0:32770->50070/tcp   hadoop0

[root@192-168-2-70 ~]# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    link/ether fa:4c:69:a7:53:00 brd ff:ff:ff:ff:ff:ff
    inet 192.168.2.70/24 brd 192.168.2.255 scope global noprefixroute eth0
       valid_lft forever preferred_lft forever
    inet6 fe80::ec25:7a4b:3d91:ce38/64 scope link tentative dadfailed 
       valid_lft forever preferred_lft forever
    inet6 fe80::546a:b23c:bc6b:e108/64 scope link tentative dadfailed 
       valid_lft forever preferred_lft forever
    inet6 fe80::a7bf:4228:3dc4:388d/64 scope link tentative dadfailed 
       valid_lft forever preferred_lft forever
3: docker0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default 
    link/ether 02:42:e6:3a:91:d9 brd ff:ff:ff:ff:ff:ff
    inet 172.17.0.1/16 brd 172.17.255.255 scope global docker0
       valid_lft forever preferred_lft forever
    inet6 fe80::42:e6ff:fe3a:91d9/64 scope link 
       valid_lft forever preferred_lft forever
4: br-8cf678167a28: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default 
    link/ether 02:42:65:cb:b3:34 brd ff:ff:ff:ff:ff:ff
    inet 172.18.0.1/16 brd 172.18.255.255 scope global br-8cf678167a28
       valid_lft forever preferred_lft forever

result of telnet command:

[root@192-168-2-70 ~]# telnet 192.168.2.70 50090
Trying 192.168.2.70...
telnet: connect to address 192.168.2.70: Connection refused
[root@192-168-2-70 ~]# telnet localhost 50090   
Trying ::1...
Connected to localhost.
Escape character is '^]'.
Connection closed by foreign host.

the question is , why container published port , such as 50090, cannot by telneted via "telnet IP port" , but can be accessed via "telnet localhost port"?

btw, service firewalld has been disabled by the host.

  • What does your container networking configuration look like ? – John Mahowald Feb 14 at 15:48
  • I have added the result of 'docker inspect ' result to the post, please kindly refer to it , thank you . – Jetzhu Feb 15 at 2:04
  • Docker exposes the ports in two ways: 1. a DNAT rule (in the DOCKER chain of netfilter table nat: iptables -t nat -nvL DOCKER), for connection coming from external interfaces, 2. a docker-proxy process that listens on the exposed port. This is mainly used when connecting to localhost. You probably broke the firewall rule, so only connections from localhost work. – Piotr P. Karwasz Feb 15 at 21:50

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.