What are the disadvantages of a Docker container using the host network? -
i understand default docker container created in own network stack.
i use --net host
flag when running docker containers allow use of host ports.
the disadvantages aware of:
- services running inside container potentially conflict other services in other containers run on same port.
- containers can access full network stack.
my question is, security impact when allowing container use full network stack?
Comments
Post a Comment