Docker proporciona varios controladores de red (bridge, host, overlay, macvlan, none) para diferentes necesidades de conectividad, además de características como redes definidas por el usuario con descubrimiento de servicios basado en DNS. Entender las redes en profundidad es importante para conectar correctamente aplicaciones multi-contenedor y multi-host.
Controladores de red
BRIDGE (default) → a private internal network on a single host; containers communicate;
isolated from the host except via published ports. USER-DEFINED bridges add DNS
(containers reach each other by name) — preferred over the default bridge.
HOST → the container uses the host's network stack directly (no isolation, no port
mapping needed) — max performance, less isolation.
OVERLAY → spans MULTIPLE hosts → containers on different machines communicate
(for Docker Swarm / multi-host clusters).
MACVLAN → gives a container its own MAC/IP on the physical network (appears as a
physical device).
NONE → no networking (fully isolated).
