Container isolation with Kata and gVisor in Docker Overview Containers are an efficient way to build and distribute workloads free of (most) host and OS dependencies, but they come at the cost of reduced security or isolation compared to virtual machines. This is why public cloud services spin up virtual machines per customer to deploy... Continue Reading →
Macvlan Docker interface with explicit endpoint MAC address
Macvlan Docker interface with explicit endpoint MAC address Probably one of thos “unicorn” problems, but I was in need of running a Juniper vMX Docker Container attached to a network interface using a statically assigned IP and MAC address. The use case is to run vMX on a baremetal server in a public cloud. Macvlan... Continue Reading →
Deploy Juniper vMX via Docker Compose
Deploy Juniper vMX via Docker Compose Being able to download and run Juniper vMX on KVM and ESXi has really helped me learning more about networking, telemetry and build automation solutions. But the software dependencies combined with manual editing and launch of shell scripts per vMX instance felt a bit outdated to me. Why can’t... Continue Reading →
Kolla: Openstack in Docker containers with Ansible playbooks
Kolla: Openstack in Docker containers with Ansible playbooks Deploying Openstack isn’t something you do before your first coffee in the morning. There are many choices, from what version and distribution to which Linux distribution and version to run it on. Once that’s decided, the painful task of checking the major and minor release dependencies starts.... Continue Reading →
Build Snabb in Docker Container on OS/X
Build Snabb in Docker Container on OS/X Docker for OS/X beta was announced end of March 2016 and I signed up for it, curious to see what I can do with it on a Macbook Air 13" I travel with frequently. Well, turns out its pretty useful. I can prototype with Snabb, compile and run... Continue Reading →
Bridge Docker Container with host interface
Bridge Docker Container with host interface Docker automatically creates a bridge docker0 and assigns IP addresses for Containers to this network. What if one wants to simply connect containers to on of the compute hosts networks? This can be achieved by creating and assigning a custom bridge to the Docke engine: https://docs.docker.com/engine/userguide/networking/default_network/custom-docker0/. Here are my... Continue Reading →
Recent Comments