Details
-
Task
-
Status: Resolved
-
Critical
-
Resolution: Won't Fix
-
None
-
None
-
linux
-
Mesosphere Sprint 30, Mesosphere Sprint 31
-
2
Description
Most docker and appc images wish to expose ports that micro-services are listening on, to the outside world. When containers are running on bridged (or ptp) networking this can be achieved by installing port forwarding rules on the agent (using iptables). This can be done in the `network/cni` isolator.
The reason we would like this functionality to be implemented in the `network/cni` isolator, and not a CNI plugin, is that the specifications currently do not support specifying port forwarding rules. Further, to install these rules the isolator needs two pieces of information, the exposed ports and the IP address associated with the container. Bother are available to the isolator.