[MESOS-1324] Create a network isolator based on port mapping

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 0.20.0
• Component/s: containerization
• Target Version/s: 0.20.0
• Epic Link: Container Network Monitoring
• Sprint: Q2 Sprint 4, Q2 Sprint 5
• Assignee: Chi Zhang
• Reporter: Jie Yu
• Created: 07/May/14 17:38
• Updated: 26/Apr/17 16:53
• Resolved: 26/Jun/14 20:06

Description

Here, we assume that we don't have enough public IPs. As a result, we are not able to assign an individual public IP to each container.

One solution is to assign the same IP for all containers on a host, and use port mapping to properly redirect network traffic to/from containers. In other words, each container will be assigned a range of ports from the host. The isolator will setup filters to properly redirect packets to/from the corresponding containers based on dst/src ip/ports.

Issue Links

• is blocked by: MESOS-1450 Add setns utilities to stout
• is blocked by: MESOS-1325 Create a linux routing library abstraction based on libnl