docker swarm 端口开放

最新推荐文章于 2025-04-08 14:47:58 发布

原创最新推荐文章于 2025-04-08 14:47:58 发布 · 678 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#java #后端

java 专栏收录该内容

304 篇文章

订阅专栏

本文介绍了Docker Swarm正常运行所需的四个关键网络端口：2376用于Docker客户端通信，2377用于集群节点间交互，7946支持节点间通信和容器网络发现，4789专用于overlay网络流量。详细讲解了如何在Linux防火墙中配置这些端口。

The network ports required for a Docker Swarm to function properly are:

TCP port 2376 for secure Docker client communication. This port is required for Docker Machine to work. Docker Machine is used to orchestrate Docker hosts.
TCP port 2377. This port is used for communication between the nodes of a Docker Swarm or cluster. It only needs to be opened on manager nodes.
TCP and UDP port 7946 for communication among nodes (container network discovery).
UDP port 4789 for overlay network traffic (container ingress networking).

2376 用于docker machine 在实体机，一般不需要。

# docker machine
firewall-cmd --add-port=2376/tcp --permanent
# manager
firewall-cmd --add-port=2377/tcp --permanent
# communication among nodes (container network discovery).
firewall-cmd --add-port=7946/tcp --permanent
firewall-cmd --add-port=7946/udp --permanent
# overlay network traffic (container ingress networking).
firewall-cmd --add-port=4789/udp --permanent