容器无法在同一EC2主机上通信

Question

我有一个通过单个ECS任务部署在EC2实例上的多容器应用程序。当我尝试从容器-1向容器-2发出HTTP请求时，我得到错误"名称或服务未知"。

当我使用docker compose运行时，我无法在本地复制此内容。我正在使用桥接网络模式。我已经SSH到EC2实例，可以看到两个容器都在桥接网络上。(我也尝试过awsvpc，但没有成功，这导致了一系列不同的问题……所以如果需要的话，我将把它保存在一个单独的帖子中。

下面是我的task-definition.json的一个片段:

{
...
"containerDefinitions": [
{
"name": "container-1",
"image": "container-1",
"portMappings": [
{
"hostPort": 8081,
"containerPort": 8081,
"protocol": "tcp"
}
]
},
{
"name": "container-2",
"image": "container-2",
"portMappings": [
{
"hostPort": 8080,
"containerPort": 8080,
"protocol": "tcp"
}
]
}
],
"networkMode": "bridge",
...
}

EDIT1 -添加一些我的ifconfig，让我知道如果我需要添加更多。

docker0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
inet 172.17.0.1  netmask 255.255.0.0  broadcast 172.17.255.255
inet6 fe80::42:a7ff:febd:55df  prefixlen 64  scopeid 0x20<link>
ether 02:42:a7:bd:55:df  txqueuelen 0  (Ethernet)
RX packets 842  bytes 55315 (54.0 KiB)
RX errors 0  dropped 0  overruns 0  frame 0
TX packets 614  bytes 78799 (76.9 KiB)
TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
ecs-bridge: flags=4099<UP,BROADCAST,MULTICAST>  mtu 1500
inet 169.254.172.1  netmask 255.255.252.0  broadcast 0.0.0.0
inet6 fe80::c5a:1bff:fed4:525f  prefixlen 64  scopeid 0x20<link>
ether 00:00:00:00:00:00  txqueuelen 1000  (Ethernet)
RX packets 0  bytes 0 (0.0 B)
RX errors 0  dropped 0  overruns 0  frame 0
TX packets 23  bytes 1890 (1.8 KiB)
TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536
inet 127.0.0.1  netmask 255.0.0.0
inet6 ::1  prefixlen 128  scopeid 0x10<host>
loop  txqueuelen 1000  (Local Loopback)
RX packets 3760  bytes 274480 (268.0 KiB)
RX errors 0  dropped 0  overruns 0  frame 0
TX packets 3760  bytes 274480 (268.0 KiB)
TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

EDIT2 - docker inspect bridge

[
{
"Name": "bridge",
"Id": "...",
"Created": "...",
"Scope": "local",
"Driver": "bridge",
"EnableIPv6": false,
"IPAM": {
"Driver": "default",
"Options": null,
"Config": [
{
"Subnet": "XXX",
"Gateway": "XXX"
}
]
},
"Internal": false,
"Attachable": false,
"Ingress": false,
"ConfigFrom": {
"Network": ""
},
"ConfigOnly": false,
"Containers": {
"somehash": {
"Name": "container-1",
"EndpointID": "XXX",
"MacAddress": "XXX",
"IPv4Address": "XXX",
"IPv6Address": ""
},
"somehash": {
"Name": "container-2",
"EndpointID": "XXX",
"MacAddress": "XXX",
"IPv4Address": "XXX",
"IPv6Address": ""
}
},
"Options": {
"com.docker.network.bridge.default_bridge": "true",
"com.docker.network.bridge.enable_icc": "true",
"com.docker.network.bridge.enable_ip_masquerade": "true",
"com.docker.network.bridge.host_binding_ipv4": "0.0.0.0",
"com.docker.network.bridge.name": "docker0",
"com.docker.network.driver.mtu": "1500"
},
"Labels": {}
}
]

Answer 1

要允许单个任务中的容器在EC2主机组网模式下相互通信，需要指定links属性以将容器映射到内部网络名称。