5b2c8c37aa
Implement Lab 02 with Docker bridge networks simulating VPC/Subnets. Test Infrastructure (RED phase): - 6 bash test scripts for network creation, isolation, INF-02 compliance - Fail-fast orchestration with run-all-tests.sh - Quick validation script for development Documentation (Diátaxis framework): - 3 tutorials: VPC creation, container deployment, isolation verification - 4 how-to guides: create network, inspect config, test isolation, cleanup - 3 reference docs: Docker network commands, Compose syntax, VPC mapping - 1 explanation: Docker ↔ VPC parallels (PARA-01/02/03/04) Infrastructure (GREEN phase): - docker-compose.yml with VPC networks (10.0.1.0/24, 10.0.2.0/24) - 5 services: web, app, db, test-public, test-private - INF-02 compliant: 127.0.0.1 bindings only, no 0.0.0.0 - Private network with --internal flag - Multi-homed app container (public + private networks) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2.2 KiB
2.2 KiB
How-To: Ispezionare la Configurazione di Rete
Guida per analizzare e debuggare le reti Docker.
Ispezionare una Rete Specifica
docker network inspect NETWORK_NAME
Output JSON con: Subnet, Gateway, Driver, Container collegati.
Comandi Utili
Mostra Solo le Informazioni Importanti
# Subnet e Gateway
docker network inspect my-network --format '{{range .IPAM.Config}}{{.Subnet}} (GW: {{.Gateway}}){{end}}'
# Solo container collegati
docker network inspect my-network --format '{{range .Containers}}{{.Name}} {{.IPv4Address}}{{end}}'
# Driver e Scope
docker network inspect my-network --format 'Driver: {{.Driver}}, Scope: {{.Scope}}'
Vedere i Container in una Rete
# Metodo 1: Tramite inspect
docker network inspect my-network --format '{{json .Containers}}' | jq '.[] | .Name'
# Metodo 2: Tramite docker ps con filtro
docker ps --filter "network=my-network" --format "{{.Names}}"
Verificare IP di un Container
# Tutti gli IP del container
docker inspect container-name --format '{{range .NetworkSettings.Networks}}{{.Network}}: {{.IPAddress}}{{end}}'
# IP in una rete specifica
docker inspect container-name --format '{{range $k, $v := .NetworkSettings.Networks}}{{if eq $k "my-network"}}{{$v.IPAddress}}{{end}}{{end}}'
Debug con Output Formattato
# Tabella container -> IP -> Rete
docker ps --format "{{.Names}}" | while read c; do
echo "Container: $c"
docker inspect $c --format '{{range $k, $v := .NetworkSettings.Networks}} {{$k}}: {{$v.IPAddress}}{{end}}'
done
Risoluzione Problemi
Rete Non Trovata
# Verifica esistenza rete
docker network ls | grep my-network
# Se non esiste, creala
docker network create my-network
Container Non in Rete
# Collega container a rete
docker network connect my-network container-name
# Scollega container da rete
docker network disconnect my-network container-name
Subnet Conflicts
# Trova subnet in conflitto
docker network ls -q | xargs docker network inspect --format '{{.Name}}: {{range .IPAM.Config}}{{.Subnet}}{{end}}' | grep "10.0.1"