TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

Weave – The Docker Network

197 pointsby ferrantimover 10 years ago

12 comments

jpgvmover 10 years ago
I hope all of these Docker overlay networks start using the in-kernel overlay network technologies soon. User-space promiscuous capture is obscenely slow.<p>Take a look at GRE and&#x2F;or VXLAN and the kernels multiple routing table support. (This is precisely why network namespaces are so badass btw). Feel free to ping me if you are working on one of these and want some pointers on how to go about integrating more deeply with the kernel.<p>It&#x27;s worth mentioning these protocols also have reasonable hardware offload support, unlike custom protocols implemented on UDP&#x2F;TCP.
评论 #8291847 未加载
评论 #8290301 未加载
评论 #8291706 未加载
评论 #8291733 未加载
t0mas88over 10 years ago
This looks like a great idea. For me this was a missing piece two months ago when playing with Docker.<p>However I have strong doubts about the network performance, not only the overhead of the UDP encapsulation (that should be quite small), but mostly the capturing of packets with pcap and then handling them in user-mode. Looks like a lot of context-switches, copying and parsing with non-optimal code paths. Are there any benchmarks available?<p>My feeling is that this will consume large amounts of CPU for moderate network loads and thus be unusable with most NoSQL kind of systems that benefit from clustering across hosts?
评论 #8290879 未加载
thuover 10 years ago
This seems very nice. What would be the pros and cons of using Weave instead of Tinc ? I have used Tinc for a while[0] and, the end result looks very similar (i.e. there is not a nice command-line tool dedicated to use Tinc with Docker, but the high level description match).<p>[0]: <a href="https://gist.github.com/noteed/11031504" rel="nofollow">https:&#x2F;&#x2F;gist.github.com&#x2F;noteed&#x2F;11031504</a>
评论 #8290256 未加载
ferrantimover 10 years ago
These are the same people who built RabbitMQ.
评论 #8289903 未加载
评论 #8289851 未加载
netcraftover 10 years ago
as someone who is more developer than ops, I feel like the docker stuff is still changing fast and that the way you would use docker today will be very different a year from now; but that containers seem to be the way of the future - if I have no pressing need to change my server architecture does it make sense to wait for things settle or would it be more beneficial to get in and learn now and experience the changes and why they were necessary?
评论 #8290693 未加载
评论 #8289910 未加载
评论 #8289929 未加载
grkvltover 10 years ago
This is really interesting. I&#x27;ve been looking for a way to build in support for networking between Docker hosts in my clocker.io software, to simplify deploying applications into a cloud hosted Docker environment. I&#x27;d been young with adding Open vSwitch, but am going to try weave as the network layer in the next release. Will there be any problems running in a cloud where I have limited control over the configuration of the host network interfaces and the traffic they can carry, such as AWS only allowing TCP and UDP between VMs?
评论 #8290791 未加载
greenimpalaover 10 years ago
Err can anyone spot the tests in the repo? I cannot.
zobzuover 10 years ago
What this really means security wise:<p><a href="http://i.imgur.com/Cko02do.png" rel="nofollow">http:&#x2F;&#x2F;i.imgur.com&#x2F;Cko02do.png</a>
评论 #8290367 未加载
saryantover 10 years ago
Question for weavenetwork: are containers addressable by hostname from other containers? Is there a good way to do that? I didn&#x27;t see anything about it in the readme.<p>I suppose service discovery is out-of-scope for this project but having some sort of weave-wide hostsfile would certainly simplify it. Am I misunderstanding the project?
评论 #8291431 未加载
brazzledazzleover 10 years ago
Has anyone compared this to rudder (<a href="https://coreos.com/blog/introducing-rudder/" rel="nofollow">https:&#x2F;&#x2F;coreos.com&#x2F;blog&#x2F;introducing-rudder&#x2F;</a>)?
评论 #8295482 未加载
评论 #8295456 未加载
GrantNelsonover 10 years ago
Yikes, this looks scary. Just because you can do something doesn&#x27;t mean you should. Networks are finicky, perf is king.
baqover 10 years ago
can you compare this with openvpn, or any other vpn if we&#x27;re at it?