[
https://issues.apache.org/jira/browse/MESOS-1324?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14000530#comment-14000530
]
Chi Zhang commented on MESOS-1324:
----------------------------------
Hi [~tstclair],
You are right. We are doing this in a lower level by directly calling to libnl
and iproute to setup tc filters.
I am not quite familiar with network for docker. Do docker containers get
private IPs behind NAT?
> Create a network isolator based on port mapping
> -----------------------------------------------
>
> Key: MESOS-1324
> URL: https://issues.apache.org/jira/browse/MESOS-1324
> Project: Mesos
> Issue Type: Improvement
> Components: isolation
> Reporter: Jie Yu
> Assignee: Chi Zhang
> Fix For: 0.20.0
>
>
> Here, we assume that we don't have enough public IPs. As a result, we are not
> able to assign an individual public IP to each container.
> One solution is to assign the same IP for all containers on a host, and use
> port mapping to properly redirect network traffic to/from containers. In
> other words, each container will be assigned a range of ports from the host.
> The isolator will setup filters to properly redirect packets to/from the
> corresponding containers based on dst/src ip/ports.
--
This message was sent by Atlassian JIRA
(v6.2#6252)
