richzw/Dockerfile

## description.md

      
    Raw
  

              description.md
            
          
    启动两个docker实例，他们的名字是 test 以及 test_gw （作为baidu url的gateway）

test

docker run --name test --cap-add=NET_ADMIN --cap-add=NET_RAW -d test:1.2

The ip of eth0 in test container is 172.17.0.4
# ping www.baidu.com
PING www.baidu.com (180.101.49.12): 56 data bytes
64 bytes from 180.101.49.12: seq=0 ttl=37 time=28.758 ms

We got the ip of  baidu.com is 180.101.49.12 from test 
# ip tunnel add tun0 mode gre remote 172.17.0.5 local 172.17.0.4 ttl 64
# ip tunnel add tun0 mode gre remote 172.17.0.5 local 172.17.0.4 ttl 64
# ip link set tun0 up
# ip addr add  100.64.0.1 peer 100.64.0.2 dev tun0

# ip route add 180.101.49.0/24 via 100.64.0.1 dev tun0


test_gw

docker run --name test_gw --cap-add=NET_ADMIN --cap-add=NET_RAW -d test:1.2

The ip of eth0 is 172.17.0.5
# ip tunnel add tun0 mode gre remote 172.17.0.4 local 172.17.0.5 ttl 64
# ip link set tun0 up
# ip addr add 100.64.0.2 peer 100.64.0.1 dev tun0

# ip route add 180.101.49.0/24 via 100.64.0.2 dev tun0

Add net
# iptables -t nat -A POSTROUTING -d 180.101.49.0/24 -j MASQUERADE

问题


在test里 执行  nc -v www.baidu.com 443
得到错误 nc: getaddrinfo: Try again


如果执行 nc -v 180.101.49.12 443 在test里，同时在test_gw tcpdump抓包，


03:55:04.573358 IP 100.64.0.1.41036 > 180.101.49.12.443: Flags [S], seq 1595471296, win 64620, options [mss 1436,sackOK,TS val 1040158415 ecr 0,nop,wscale 7], length 0
03:55:04.573392 IP 100.64.0.2.41036 > 180.101.49.12.443: Flags [S], seq 1595471296, win 64620, options [mss 1436,sackOK,TS val 1040158415 ecr 0,nop,wscale 7], length 0
03:55:04.573455 IP 100.64.0.1 > 100.64.0.2: ICMP redirect 180.101.49.12 to host 180.101.49.12, length 68
03:55:04.573466 IP 100.64.0.2.41036 > 180.101.49.12.443: Flags [S], seq 1595471296, win 64620, options [mss 1436,sackOK,TS val 1040158415 ecr 0,nop,wscale 7], length 0
03:55:05.571442 IP 100.64.0.1.41036 > 180.101.49.12.443: Flags [S], seq 1595471296, win 64620, options [mss 1436,sackOK,TS val 1040159448 ecr 0,nop,wscale 7], length 0
03:55:05.571486 IP 100.64.0.2.41036 > 180.101.49.12.443: Flags [S], seq 1595471296, win 64620, options [mss 1436,sackOK,TS val 1040159448 ecr 0,nop,wscale 7], length 0

只有sync 包，即使加上 nat 也是如此。

  
## Dockerfile
FROM alpine:latest

RUN apk add -U libcap netcat-openbsd

RUN apk add --no-cache iptables ip6tables

RUN apk --no-cache add tcpdump

ENTRYPOINT ["sleep", "1h"]
	FROM alpine:latest

	RUN apk add -U libcap netcat-openbsd

	RUN apk add --no-cache iptables ip6tables

	RUN apk --no-cache add tcpdump

	ENTRYPOINT ["sleep", "1h"]