What are the disadvantages of a Docker container using the host network? -


i understand default docker container created in own network stack.

i use --net host flag when running docker containers allow use of host ports.

the disadvantages aware of:

  1. services running inside container potentially conflict other services in other containers run on same port.
  2. containers can access full network stack.

my question is, security impact when allowing container use full network stack?


Comments

Popular posts from this blog

sublimetext3 - what keyboard shortcut is to comment/uncomment for this script tag in sublime -

java - No use of nillable="0" in SOAP Webservice -

ubuntu - Laravel 5.2 quickstart guide gives Not Found Error -