Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Do not add names to ingress network #1489

Merged
merged 1 commit into from
Oct 5, 2016
Merged

Do not add names to ingress network #1489

merged 1 commit into from
Oct 5, 2016

Conversation

mrjana
Copy link
Contributor

@mrjana mrjana commented Oct 3, 2016

Do not add service discovery names to ingress network as this is a
routing only network and no intra-cluster discovery should happen in
that network. This fixes the ambiguity and resolving names between
services which are both publishing ports and also attached to same
another network.

Related to moby/moby#27147

Signed-off-by: Jana Radhakrishnan mrjana@docker.com

@aboch
Copy link
Contributor

aboch commented Oct 3, 2016

LGTM

@sanimej
Copy link

sanimej commented Oct 4, 2016

@mrjana If a service publishes a port and is attached to a user created overlay network we prefer that network in the name resolution and not the ingress network. Does the ambiguity happen in some other case ?

I think this change can be made after we block the service creation on the ingress network. Otherwise the behavior will be confusing. wdyt ? AFAIK, our documentation doesn't mention that service creation on ingress network is not recommended/supported.

Do not add service discovery names to ingress network as this is a
routing only network and no intra-cluster discovery should happen in
that network. This fixes the ambiguity and resolving names between
services which are both publishing ports and also attached to same
another network.

Signed-off-by: Jana Radhakrishnan <mrjana@docker.com>
@mrjana
Copy link
Contributor Author

mrjana commented Oct 4, 2016

@sanimej Ah yes, I totally forgot about that fix you made for preferring user defined network. But nevertheless, there are still some issues with creating name entries in the ingress network and it is totally unnecessary. We never intended ingress network to be used the way it is being used and we should block. There is multiple PRs underway at the moment to fix this unintended ingress network behavior. This is part of them.

@vieux
Copy link
Contributor

vieux commented Oct 5, 2016

👍

@aboch aboch merged commit d9e5cdf into moby:master Oct 5, 2016
@vieux
Copy link
Contributor

vieux commented Oct 5, 2016

@mrjana @mavenugo can you the PRs to docker/master and docker/1.12.x ?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants