Docker ping ipv6 端点

Question

我有一个 docker 心跳容器，运行从那里应该建立一个到 ipv6 端点的连接。

在心跳容器中，ping6 命令不成功，在主机上它正在工作。

在容器中

sh-4.2$ ping6 ipv6.google.com
PING ipv6.google.com(ams15s32-in-x0e.1e100.net (2a00:1450:400e:809::200e)) 56 data bytes
^C

在虚拟机上

[root@myserver myuser]# ping6 ipv6.google.com
PING ipv6.google.com(ams15s30-in-x0e.1e100.net (2a00:1450:400e:807::200e)) 56 data bytes
64 bytes from ams15s30-in-x0e.1e100.net (2a00:1450:400e:807::200e): icmp_seq=1 ttl=120 time=6.55 ms
64 bytes from ams15s30-in-x0e.1e100.net (2a00:1450:400e:807::200e): icmp_seq=2 ttl=120 time=6.60 ms

我已经用子网配置了 daemon.json 文件，docker-compose 文件负责准备 ipv6 网络

version: "2.2"
services:
  heartbeat:
    image: docker.elastic.co/beats/heartbeat:7.10.1
    container_name: "heartbeat"
    volumes:
      - "./elastic/heartbeat.yml:/usr/share/heartbeat/heartbeat.yml:ro"
      - "./elastic/monitor.d/:/usr/share/heartbeat/monitor.d/:ro"
    networks:
      - beats
networks:
  beats:
    enable_ipv6: true
    driver: bridge
    ipam:
      driver: default
      config:
        - subnet: 2a02:1800:1e0:408f::806:0/112
        - gateway: 2a02:1800:1e0:408f::806:1

docker 网络 ls 显示网络设置正确

docker network ls
NETWORK ID     NAME                  DRIVER    SCOPE
...
328408216a9f   deployments_beats     bridge    local
...

并且桥接网络出现在 ifconfig 概览中，其中包含以下信息

br-328408216a9f: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 172.19.0.1  netmask 255.255.0.0  broadcast 172.19.255.255
        inet6 2a02:1800:1e0:408f::806:1  prefixlen 112  scopeid 0x0<global>
        inet6 fe80::1  prefixlen 64  scopeid 0x20<link>
        inet6 fe80::42:52ff:fe98:e176  prefixlen 64  scopeid 0x20<link>
        ether 02:42:52:98:e1:76  txqueuelen 0  (Ethernet)
        RX packets 8  bytes 656 (656.0 B)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 7  bytes 746 (746.0 B)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

我在设置过程中遗漏了什么吗？

Answer 1

您还需要在 docker 引擎上启用 ipv6：

Edit /etc/docker/daemon.json, set the ipv6 key to true and the fixed-cidr-v6 key to your IPv6 subnet. In this example we are setting it to 2001:db8:1::/64.
 {
   "ipv6": true,
   "fixed-cidr-v6": "2001:db8:1::/64"
 }
Save the file.
Reload the Docker configuration file.
 $ systemctl reload docker

https://docs.docker.com/config/daemon/ipv6/

Answer 2

使用https://github.com/robbertkl/docker-ipv6nat

解决

将容器添加到我的 docker 设置中

我的 daemon.json 文件在 /etc/docker/

{
  "ipv6": true,
  "fixed-cidr-v6": "fd00::/64"
}

这将使用唯一的本地子网

在我的 docker-compose 中创建了一个 ipv6 网络

networks:
  beats:
    enable_ipv6: true
    driver: bridge
    ipam:
      driver: default
      config:
        - subnet: fd00:1::/80

注意我在范围内使用的前缀 1

将您的容器添加到网络，它就可以工作了

Docker ping ipv6 端点

Docker ping ipv6 endpoint

docker

ipv6

heartbeat