Comment on Question on SSL traffic between podman containers and clients (should I run k3s?)
vegetaaaaaaa@lemmy.world 1 year agoCould you detail how you would do this?
I would re-read all docs about podman networking, different network modes, experiment with systemd PrivateNetwork
option, re-read some basic about network namespaces, etc ;) I have no precise guide as I’ve never attempted it, so I would do some research, trial and error, take notes, etc, which is the stage you’re at.
Could you confirm if one can reach one’s containers on the loopback address in a separate network namespace on podman?
I think each pod uses its own network namespace [1]. You should check the docs and experiment (ip netns, ip addr, ip link, ip route…
).
I think it’s doable, but pretty much uncharted territory - at least the docs for basic building blocks exist, but I’ve never come across a real world example of how to do this. So if you go this way, you will be on your own debugging, documenting and maintaining the system and fixing it when it breaks. It will be an interesting learning experiment though, hope you can document and share the outcome. Good luck!
MigratingtoLemmy@lemmy.world 1 year ago
Thank you, I do realise that each pod uses its own namespace. I was talking about if containers part of a different network namespace (outside of their pods) could also reach out to each other via the loopback address.
vegetaaaaaaa@lemmy.world 1 year ago
No, they can’t.
MigratingtoLemmy@lemmy.world 1 year ago
Even if containers from different pods are put in an arbitrary namespace?
Ex:
Will they be able to connect via loopback?