I think it’s a good idea to always use EXPOSE in your Dockerfile if your service listens on a port because it explicitly states what port the service uses. This is useful if you had let’s say nginx running on your Docker host and you wanted it to be able to connect to a container.
You can use -p 127.0.0.1:80:80 to do the same as #2 / #3 except now only your local Docker host will be able to connect, not everyone. Everyone from the outside world will be able to connect. You can ignore exposing anything and just use -p 80:80 in which case this doubles as both exposing AND publishing the port. This will bind the exposed port to your Docker host on port 80, and it expects the exposed port is 80 too (adjust as necessary with HOST:CONTAINER). You can expose a port through your Dockerfile or use -expose and then publish it with the -p 80:80 flag. This will bind the exposed port to your Docker host on a random port (verified by running docker container ls). You can expose a port through your Dockerfile or use -expose and then publish it with the -P flag. Allowing Containers to Talk to Each Other + the Outside World They did that as a best practice to inform you on which port is being used. If you check out the official Docker images for Postgres and Redis, you’ll notice they set up EXPOSE 5432 (Postgres) and EXPOSE 6379 (Redis) in their Dockerfile already. These are things you typically wouldn’t want accessible from the internet, but you would want them accessible to your web application containers running on the same Docker network. This is useful for services like Postgres or Redis. Allowing Containers to Talk to Each Other InternallyĬontainers on the same network can talk to each other regardless of whether or not you exposed or published your ports back to the Docker host with -p. command, but you would only want to do this if you don’t have EXPOSE defined in your Dockerfile, but depending on what you want to do, you may not need to expose anything. You can also expose a port using -expose 80 from the docker container run -expose 80.
The exposed port will be in the PORTS column, and it’s also available when you inspect a container. That “documentation” is presented to you when you do a docker container ls. You can think of it more like a runtime configuration option that’s explicitly stated in your Dockerfile to act as nothing more than documentation on which port(s) your service listens on. It doesn’t set up any networking properties. When you put EXPOSE 80 (or any port you want) in your Dockerfile that’s going to tell Docker that your container’s service can be connected to on port 80. Updated on June 29th, 2021 in #docker Docker Tip #59: Difference between Exposing and Publishing Ports You can expose ports by using EXPOSE in your Dockerfile, -expose on the command line but there's also publishing ports too.
0 kommentar(er)
