diff options
| author | Steven Dake <stdake@cisco.com> | 2015-03-28 08:11:34 -0700 |
|---|---|---|
| committer | Steven Dake <stdake@cisco.com> | 2015-04-06 20:25:18 -0700 |
| commit | a87980e5c21b17a60ba46cb53208140143ed8b15 (patch) | |
| tree | 04630da402ad9349b11d0d50272cda977019e585 /specs | |
| parent | 53c1ba99c82ee299877c95f97eea3d06b0bb398a (diff) | |
| download | kolla-a87980e5c21b17a60ba46cb53208140143ed8b15.tar.gz kolla-a87980e5c21b17a60ba46cb53208140143ed8b15.zip | |
Remove EXPOSE options from Dockerfiles
The EXPOSE options will create a local docker-proxy. This is
unnecessary with --net=host mode. The docker-proxy adds about
20 microseconds of latency. Add documentation to the specification
to indicate where to find the ports that are exposed by the
services in case someone were to desire to add EXPOSE back to
the Dockerfiles.
Change-Id: I398e922fe096d6022a2d5985bb92498f89a5ea31
Diffstat (limited to 'specs')
| -rw-r--r-- | specs/containerize-openstack.rst | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/specs/containerize-openstack.rst b/specs/containerize-openstack.rst index 3aeb67be1..f035ec2e0 100644 --- a/specs/containerize-openstack.rst +++ b/specs/containerize-openstack.rst @@ -188,6 +188,15 @@ with the --privileged=true flag to docker that: leaf directories with no other host operating system use. * shares any namespace with the --ipc=host, --pid=host, or --net=host flags +We will not use the Docker EXPOSE operation since all containers will use +--net=host. One motive for using --net=host is it is inherently simplier. +A different motive for not using EXPOSE is the 20 microsecond penalty +applied to every packet forwarded and returned by docker-proxy. +If EXPOSE functionality is desired, it can be added back by +referencing the default list of OpenStack ports to each Dockerfile: + + http://docs.openstack.org/trunk/config-reference/content/firewalls-default-ports.html + We will use the docker flag --restart=always to provide some measure of high availability for the individual containers and ensure they operate correctly as currently designed. |