new file mode 100644

Binary files /dev/null and b/docs/swarm/images/service-vip.png differ

new file mode 100644

@@ -0,0 +1 @@

+<svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="872.0888761605971" height="616.5246403801868"><style xmlns="http://www.w3.org/1999/xhtml"></style><defs/><g transform="translate(0,0)"><g><rect fill="#ffffff" stroke="none" x="0" y="0" width="872.0888761605971" height="616.5246403801868"/></g><g transform="translate(0,0) matrix(1,0,0,1,30.01527419063106,360)"><g><g transform="translate(0,0) scale(2.227454370699169,1.2993483829078496)"><g><path fill="#ccf4f4" stroke="none" d="M 0 0 L 100 0 Q 100 0 100 0 L 100 100 Q 100 100 100 100 L 0 100 Q 0 100 0 100 L 0 0 Q 0 0 0 0 Z"/><g transform="scale(0.4489429786550972,0.7696165348373089)"><path fill="none" stroke="none" d="M 0 0 L 222.7454370699169 0 Q 222.7454370699169 0 222.7454370699169 0 L 222.7454370699169 129.93483829078497 Q 222.7454370699169 129.93483829078497 222.7454370699169 129.93483829078497 L 0 129.93483829078497 Q 0 129.93483829078497 0 129.93483829078497 L 0 0 Q 0 0 0 0 Z"/><path fill="none" stroke="#00a2a2" d="M 0 0 M 0 0 L 222.7454370699169 0 Q 222.7454370699169 0 222.7454370699169 0 L 222.7454370699169 129.93483829078497 Q 222.7454370699169 129.93483829078497 222.7454370699169 129.93483829078497 L 0 129.93483829078497 Q 0 129.93483829078497 0 129.93483829078497 L 0 0 Q 0 0 0 0 Z" stroke-miterlimit="10" stroke-width="2"/></g></g></g></g></g><g transform="matrix(1,0,0,1,42,415)"><g transform="translate(150,-2) matrix(1,0,0,1,0,0) translate(-150,2)"><g><rect fill="rgb(0,0,0)" stroke="none" x="0" y="0" width="199" height="20" fill-opacity="0"/></g></g><g transform="translate(150,-2) matrix(1,0,0,1,0,0) translate(-150,2)"><g><rect fill="rgb(0,0,0)" stroke="none" x="0" y="0" width="199" height="20" fill-opacity="0"/></g></g><g transform="translate(150,-2) matrix(1,0,0,1,0,0) translate(-150,2)"><g><rect fill="rgb(0,0,0)" stroke="none" x="75" y="-1" width="50" height="21" fill-opacity="0"/></g></g><g transform="translate(150,-2) matrix(1,0,0,1,0,0) translate(-150,2)"><g><rect fill="rgb(0,0,0)" stroke="none" x="75" y="-1" width="50" height="21" fill-opacity="0"/></g><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="18px" font-style="normal" font-weight="normal" text-decoration="" line-height="20.5px" x="75" y="15">node1</text></g></g><g transform="translate(0,0) matrix(1,0,0,1,625.3933561283152,359.9125925797616)"><g><g transform="translate(0,0) scale(2.227454370699169,1.2993483829078496)"><g><path fill="#ccf4f4" stroke="none" d="M 0 0 L 100 0 Q 100 0 100 0 L 100 100 Q 100 100 100 100 L 0 100 Q 0 100 0 100 L 0 0 Q 0 0 0 0 Z"/><g transform="scale(0.4489429786550972,0.7696165348373089)"><path fill="none" stroke="none" d="M 0 0 L 222.7454370699169 0 Q 222.7454370699169 0 222.7454370699169 0 L 222.7454370699169 129.93483829078497 Q 222.7454370699169 129.93483829078497 222.7454370699169 129.93483829078497 L 0 129.93483829078497 Q 0 129.93483829078497 0 129.93483829078497 L 0 0 Q 0 0 0 0 Z"/><path fill="none" stroke="#00a2a2" d="M 0 0 M 0 0 L 222.7454370699169 0 Q 222.7454370699169 0 222.7454370699169 0 L 222.7454370699169 129.93483829078497 Q 222.7454370699169 129.93483829078497 222.7454370699169 129.93483829078497 L 0 129.93483829078497 Q 0 129.93483829078497 0 129.93483829078497 L 0 0 Q 0 0 0 0 Z" stroke-miterlimit="10" stroke-width="2"/></g></g></g></g></g><g transform="matrix(1,0,0,1,637,415)"><g transform="translate(150,-2) matrix(1,0,0,1,0,0) translate(-150,2)"><g><rect fill="rgb(0,0,0)" stroke="none" x="0" y="0" width="199" height="20" fill-opacity="0"/></g></g><g transform="translate(150,-2) matrix(1,0,0,1,0,0) translate(-150,2)"><g><rect fill="rgb(0,0,0)" stroke="none" x="0" y="0" width="199" height="20" fill-opacity="0"/></g></g><g transform="translate(150,-2) matrix(1,0,0,1,0,0) translate(-150,2)"><g><rect fill="rgb(0,0,0)" stroke="none" x="75" y="-1" width="50" height="21" fill-opacity="0"/></g></g><g transform="translate(150,-2) matrix(1,0,0,1,0,0) translate(-150,2)"><g><rect fill="rgb(0,0,0)" stroke="none" x="75" y="-1" width="50" height="21" fill-opacity="0"/></g><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="18px" font-style="normal" font-weight="normal" text-decoration="" line-height="20.5px" x="75" y="15">node3</text></g></g><g transform="translate(0,0) matrix(1,0,0,1,326,359.7245006145894)"><g><g transform="translate(0,0) scale(2.227454370699169,1.2993483829078496)"><g><path fill="#ccf4f4" stroke="none" d="M 0 0 L 100 0 Q 100 0 100 0 L 100 100 Q 100 100 100 100 L 0 100 Q 0 100 0 100 L 0 0 Q 0 0 0 0 Z"/><g transform="scale(0.4489429786550972,0.7696165348373089)"><path fill="none" stroke="none" d="M 0 0 L 222.7454370699169 0 Q 222.7454370699169 0 222.7454370699169 0 L 222.7454370699169 129.93483829078497 Q 222.7454370699169 129.93483829078497 222.7454370699169 129.93483829078497 L 0 129.93483829078497 Q 0 129.93483829078497 0 129.93483829078497 L 0 0 Q 0 0 0 0 Z"/><path fill="none" stroke="#00a2a2" d="M 0 0 M 0 0 L 222.7454370699169 0 Q 222.7454370699169 0 222.7454370699169 0 L 222.7454370699169 129.93483829078497 Q 222.7454370699169 129.93483829078497 222.7454370699169 129.93483829078497 L 0 129.93483829078497 Q 0 129.93483829078497 0 129.93483829078497 L 0 0 Q 0 0 0 0 Z" stroke-miterlimit="10" stroke-width="2"/></g></g></g></g></g><g transform="matrix(1,0,0,1,338,415)"><g transform="translate(150,-2) matrix(1,0,0,1,0,0) translate(-150,2)"><g><rect fill="rgb(0,0,0)" stroke="none" x="0" y="0" width="199" height="20" fill-opacity="0"/></g></g><g transform="translate(150,-2) matrix(1,0,0,1,0,0) translate(-150,2)"><g><rect fill="rgb(0,0,0)" stroke="none" x="0" y="0" width="199" height="20" fill-opacity="0"/></g></g><g transform="translate(150,-2) matrix(1,0,0,1,0,0) translate(-150,2)"><g><rect fill="rgb(0,0,0)" stroke="none" x="75" y="-1" width="50" height="21" fill-opacity="0"/></g></g><g transform="translate(150,-2) matrix(1,0,0,1,0,0) translate(-150,2)"><g><rect fill="rgb(0,0,0)" stroke="none" x="75" y="-1" width="50" height="21" fill-opacity="0"/></g><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="18px" font-style="normal" font-weight="normal" text-decoration="" line-height="20.5px" x="75" y="15">node2</text></g></g><g transform="translate(0,0) matrix(1,0,0,1,325.9187498337799,270)"><g><g transform="translate(0,0) scale(0.9095438680354939,0.7610469099888831)"><g><path fill="none" stroke="none" d="M 10 0 L 90 0 Q 100 0 100 10 L 100 90 Q 100 100 90 100 L 10 100 Q 0 100 0 90 L 0 10 Q 0 0 10 0 Z"/><g transform="scale(1.099452192624728,1.313979449722235)"><path fill="#ffc400" stroke="none" d="M 10 0 L 80.9543868035494 0 Q 90.9543868035494 0 90.9543868035494 10 L 90.9543868035494 66.10469099888832 Q 90.9543868035494 76.10469099888832 80.9543868035494 76.10469099888832 L 10 76.10469099888832 Q 0 76.10469099888832 0 66.10469099888832 L 0 10 Q 0 0 10 0 Z" opacity="0.5"/><path fill="none" stroke="#ffc400" d="M 10 0 M 10 0 L 80.9543868035494 0 Q 90.9543868035494 0 90.9543868035494 10 L 90.9543868035494 66.10469099888832 Q 90.9543868035494 76.10469099888832 80.9543868035494 76.10469099888832 L 10 76.10469099888832 Q 0 76.10469099888832 0 66.10469099888832 L 0 10 Q 0 0 10 0 Z" stroke-miterlimit="10" stroke-width="2" opacity="0.5"/></g></g></g></g></g><g transform="matrix(1,0,0,1,336,292)"><g transform="translate(34,48) matrix(1,0,0,1,0,0) translate(-34,-48)"><g><rect fill="rgb(0,0,0)" stroke="none" x="0" y="0" width="72" height="32" fill-opacity="0"/></g></g><g transform="translate(34,48) matrix(1,0,0,1,0,0) translate(-34,-48)"><g><rect fill="rgb(0,0,0)" stroke="none" x="0" y="0" width="72" height="16" fill-opacity="0"/></g></g><g transform="translate(34,48) matrix(1,0,0,1,0,0) translate(-34,-48)"><g><rect fill="rgb(0,0,0)" stroke="none" x="6" y="0" width="61" height="15" fill-opacity="0"/></g></g><g transform="translate(34,48) matrix(1,0,0,1,0,0) translate(-34,-48)"><g><rect fill="rgb(0,0,0)" stroke="none" x="6" y="0" width="61" height="15" fill-opacity="0"/></g><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="14px" font-style="normal" font-weight="normal" text-decoration="" line-height="16.5px" x="6" y="13">my</text><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="14px" font-style="normal" font-weight="normal" text-decoration="" line-height="16.5px" x="25" y="13">-</text><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="14px" font-style="normal" font-weight="normal" text-decoration="" line-height="16.5px" x="29" y="13">web</text><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="14px" font-style="normal" font-weight="normal" text-decoration="" line-height="16.5px" x="55" y="13">.</text><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="14px" font-style="normal" font-weight="normal" text-decoration="" line-height="16.5px" x="58" y="13">2</text></g><g transform="translate(34,48) matrix(1,0,0,1,0,0) translate(-34,-48)"><g><rect fill="rgb(0,0,0)" stroke="none" x="0" y="16" width="72" height="16" fill-opacity="0"/></g></g><g transform="translate(34,48) matrix(1,0,0,1,0,0) translate(-34,-48)"><g><rect fill="rgb(0,0,0)" stroke="none" x="11" y="16" width="50" height="15" fill-opacity="0"/></g></g><g transform="translate(34,48) matrix(1,0,0,1,0,0) translate(-34,-48)"><g><rect fill="rgb(0,0,0)" stroke="none" x="11" y="16" width="50" height="15" fill-opacity="0"/></g><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="14px" font-style="normal" font-weight="normal" text-decoration="" line-height="16.5px" x="11" y="29">10</text><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="14px" font-style="normal" font-weight="normal" text-decoration="" line-height="16.5px" x="26" y="29">.</text><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="14px" font-style="normal" font-weight="normal" text-decoration="" line-height="16.5px" x="30" y="29">0</text><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="14px" font-style="normal" font-weight="normal" text-decoration="" line-height="16.5px" x="38" y="29">.</text><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="14px" font-style="normal" font-weight="normal" text-decoration="" line-height="16.5px" x="42" y="29">9</text><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="14px" font-style="normal" font-weight="normal" text-decoration="" line-height="16.5px" x="50" y="29">.</text><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="14px" font-style="normal" font-weight="normal" text-decoration="" line-height="16.5px" x="54" y="29">4</text></g></g><g transform="translate(0,0) matrix(1,0,0,1,29.852953890121896,269.13194106831963)"><g><g transform="translate(0,0) scale(0.9095438680354939,0.7610469099888831)"><g><path fill="none" stroke="none" d="M 10 0 L 90 0 Q 100 0 100 10 L 100 90 Q 100 100 90 100 L 10 100 Q 0 100 0 90 L 0 10 Q 0 0 10 0 Z"/><g transform="scale(1.099452192624728,1.313979449722235)"><path fill="#ffc400" stroke="none" d="M 10 0 L 80.9543868035494 0 Q 90.9543868035494 0 90.9543868035494 10 L 90.9543868035494 66.10469099888832 Q 90.9543868035494 76.10469099888832 80.9543868035494 76.10469099888832 L 10 76.10469099888832 Q 0 76.10469099888832 0 66.10469099888832 L 0 10 Q 0 0 10 0 Z" opacity="0.5"/><path fill="none" stroke="#ffc400" d="M 10 0 M 10 0 L 80.9543868035494 0 Q 90.9543868035494 0 90.9543868035494 10 L 90.9543868035494 66.10469099888832 Q 90.9543868035494 76.10469099888832 80.9543868035494 76.10469099888832 L 10 76.10469099888832 Q 0 76.10469099888832 0 66.10469099888832 L 0 10 Q 0 0 10 0 Z" stroke-miterlimit="10" stroke-width="2" opacity="0.5"/></g></g></g></g></g><g transform="matrix(1,0,0,1,40,291)"><g transform="translate(34,48) matrix(1,0,0,1,0,0) translate(-34,-48)"><g><rect fill="rgb(0,0,0)" stroke="none" x="0" y="0" width="72" height="32" fill-opacity="0"/></g></g><g transform="translate(34,48) matrix(1,0,0,1,0,0) translate(-34,-48)"><g><rect fill="rgb(0,0,0)" stroke="none" x="0" y="0" width="72" height="16" fill-opacity="0"/></g></g><g transform="translate(34,48) matrix(1,0,0,1,0,0) translate(-34,-48)"><g><rect fill="rgb(0,0,0)" stroke="none" x="6" y="0" width="61" height="15" fill-opacity="0"/></g></g><g transform="translate(34,48) matrix(1,0,0,1,0,0) translate(-34,-48)"><g><rect fill="rgb(0,0,0)" stroke="none" x="6" y="0" width="61" height="15" fill-opacity="0"/></g><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="14px" font-style="normal" font-weight="normal" text-decoration="" line-height="16.5px" x="6" y="13">my</text><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="14px" font-style="normal" font-weight="normal" text-decoration="" line-height="16.5px" x="25" y="13">-</text><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="14px" font-style="normal" font-weight="normal" text-decoration="" line-height="16.5px" x="29" y="13">web</text><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="14px" font-style="normal" font-weight="normal" text-decoration="" line-height="16.5px" x="55" y="13">.</text><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="14px" font-style="normal" font-weight="normal" text-decoration="" line-height="16.5px" x="58" y="13">1</text></g><g transform="translate(34,48) matrix(1,0,0,1,0,0) translate(-34,-48)"><g><rect fill="rgb(0,0,0)" stroke="none" x="0" y="16" width="72" height="16" fill-opacity="0"/></g></g><g transform="translate(34,48) matrix(1,0,0,1,0,0) translate(-34,-48)"><g><rect fill="rgb(0,0,0)" stroke="none" x="11" y="16" width="50" height="15" fill-opacity="0"/></g></g><g transform="translate(34,48) matrix(1,0,0,1,0,0) translate(-34,-48)"><g><rect fill="rgb(0,0,0)" stroke="none" x="11" y="16" width="50" height="15" fill-opacity="0"/></g><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="14px" font-style="normal" font-weight="normal" text-decoration="" line-height="16.5px" x="11" y="29">10</text><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="14px" font-style="normal" font-weight="normal" text-decoration="" line-height="16.5px" x="26" y="29">.</text><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="14px" font-style="normal" font-weight="normal" text-decoration="" line-height="16.5px" x="30" y="29">0</text><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="14px" font-style="normal" font-weight="normal" text-decoration="" line-height="16.5px" x="38" y="29">.</text><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="14px" font-style="normal" font-weight="normal" text-decoration="" line-height="16.5px" x="42" y="29">9</text><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="14px" font-style="normal" font-weight="normal" text-decoration="" line-height="16.5px" x="50" y="29">.</text><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="14px" font-style="normal" font-weight="normal" text-decoration="" line-height="16.5px" x="54" y="29">3</text></g></g><g transform="translate(0,0) matrix(1,0,0,1,625.6969980521498,270.3694165382551)"><g><g transform="translate(0,0) scale(0.9095438680354939,0.7610469099888831)"><g><path fill="none" stroke="none" d="M 10 0 L 90 0 Q 100 0 100 10 L 100 90 Q 100 100 90 100 L 10 100 Q 0 100 0 90 L 0 10 Q 0 0 10 0 Z"/><g transform="scale(1.099452192624728,1.313979449722235)"><path fill="#ffc400" stroke="none" d="M 10 0 L 80.9543868035494 0 Q 90.9543868035494 0 90.9543868035494 10 L 90.9543868035494 66.10469099888832 Q 90.9543868035494 76.10469099888832 80.9543868035494 76.10469099888832 L 10 76.10469099888832 Q 0 76.10469099888832 0 66.10469099888832 L 0 10 Q 0 0 10 0 Z" opacity="0.5"/><path fill="none" stroke="#ffc400" d="M 10 0 M 10 0 L 80.9543868035494 0 Q 90.9543868035494 0 90.9543868035494 10 L 90.9543868035494 66.10469099888832 Q 90.9543868035494 76.10469099888832 80.9543868035494 76.10469099888832 L 10 76.10469099888832 Q 0 76.10469099888832 0 66.10469099888832 L 0 10 Q 0 0 10 0 Z" stroke-miterlimit="10" stroke-width="2" opacity="0.5"/></g></g></g></g></g><g transform="matrix(1,0,0,1,636,292)"><g transform="translate(34,48) matrix(1,0,0,1,0,0) translate(-34,-48)"><g><rect fill="rgb(0,0,0)" stroke="none" x="0" y="0" width="72" height="32" fill-opacity="0"/></g></g><g transform="translate(34,48) matrix(1,0,0,1,0,0) translate(-34,-48)"><g><rect fill="rgb(0,0,0)" stroke="none" x="0" y="0" width="72" height="16" fill-opacity="0"/></g></g><g transform="translate(34,48) matrix(1,0,0,1,0,0) translate(-34,-48)"><g><rect fill="rgb(0,0,0)" stroke="none" x="6" y="0" width="61" height="15" fill-opacity="0"/></g></g><g transform="translate(34,48) matrix(1,0,0,1,0,0) translate(-34,-48)"><g><rect fill="rgb(0,0,0)" stroke="none" x="6" y="0" width="61" height="15" fill-opacity="0"/></g><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="14px" font-style="normal" font-weight="normal" text-decoration="" line-height="16.5px" x="6" y="13">my</text><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="14px" font-style="normal" font-weight="normal" text-decoration="" line-height="16.5px" x="25" y="13">-</text><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="14px" font-style="normal" font-weight="normal" text-decoration="" line-height="16.5px" x="29" y="13">web</text><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="14px" font-style="normal" font-weight="normal" text-decoration="" line-height="16.5px" x="55" y="13">.</text><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="14px" font-style="normal" font-weight="normal" text-decoration="" line-height="16.5px" x="58" y="13">3</text></g><g transform="translate(34,48) matrix(1,0,0,1,0,0) translate(-34,-48)"><g><rect fill="rgb(0,0,0)" stroke="none" x="0" y="16" width="72" height="16" fill-opacity="0"/></g></g><g transform="translate(34,48) matrix(1,0,0,1,0,0) translate(-34,-48)"><g><rect fill="rgb(0,0,0)" stroke="none" x="11" y="16" width="50" height="15" fill-opacity="0"/></g></g><g transform="translate(34,48) matrix(1,0,0,1,0,0) translate(-34,-48)"><g><rect fill="rgb(0,0,0)" stroke="none" x="11" y="16" width="50" height="15" fill-opacity="0"/></g><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="14px" font-style="normal" font-weight="normal" text-decoration="" line-height="16.5px" x="11" y="29">10</text><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="14px" font-style="normal" font-weight="normal" text-decoration="" line-height="16.5px" x="26" y="29">.</text><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="14px" font-style="normal" font-weight="normal" text-decoration="" line-height="16.5px" x="30" y="29">0</text><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="14px" font-style="normal" font-weight="normal" text-decoration="" line-height="16.5px" x="38" y="29">.</text><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="14px" font-style="normal" font-weight="normal" text-decoration="" line-height="16.5px" x="42" y="29">9</text><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="14px" font-style="normal" font-weight="normal" text-decoration="" line-height="16.5px" x="50" y="29">.</text><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="14px" font-style="normal" font-weight="normal" text-decoration="" line-height="16.5px" x="54" y="29">5</text></g></g><g transform="matrix(1,0,0,1,25.352953890121906,274.92248898178724)"><g transform="translate(0,0)"><g transform="translate(-48.41504532240131,-275.1139954723511) translate(23.062091432279406,0.19150649056388147) matrix(1,0,0,1,0,0)"><g><path fill="none" stroke="#254356" d="M 29.852953890121906 279.42248898178724 L 716.6513848556991 280.65996445172266" stroke-miterlimit="10" stroke-width="2"/></g></g></g></g><g transform="translate(0,0) matrix(1,0,0,1,30,520.4199493812985)"><g><g transform="translate(0,0) scale(0.9095438680354939,0.7610469099888831)"><g><path fill="none" stroke="none" d="M 10 0 L 90 0 Q 100 0 100 10 L 100 90 Q 100 100 90 100 L 10 100 Q 0 100 0 90 L 0 10 Q 0 0 10 0 Z"/><g transform="scale(1.099452192624728,1.313979449722235)"><path fill="#ffc400" stroke="none" d="M 10 0 L 80.9543868035494 0 Q 90.9543868035494 0 90.9543868035494 10 L 90.9543868035494 66.10469099888832 Q 90.9543868035494 76.10469099888832 80.9543868035494 76.10469099888832 L 10 76.10469099888832 Q 0 76.10469099888832 0 66.10469099888832 L 0 10 Q 0 0 10 0 Z" opacity="0.5"/><path fill="none" stroke="#ffc400" d="M 10 0 M 10 0 L 80.9543868035494 0 Q 90.9543868035494 0 90.9543868035494 10 L 90.9543868035494 66.10469099888832 Q 90.9543868035494 76.10469099888832 80.9543868035494 76.10469099888832 L 10 76.10469099888832 Q 0 76.10469099888832 0 66.10469099888832 L 0 10 Q 0 0 10 0 Z" stroke-miterlimit="10" stroke-width="2" opacity="0.5"/></g></g></g></g></g><g transform="matrix(1,0,0,1,129,539)"><g transform="translate(160,56) matrix(1,0,0,1,0,0) translate(-160,-56)"><g><rect fill="rgb(0,0,0)" stroke="none" x="0" y="0" width="200" height="40" fill-opacity="0"/></g></g><g transform="translate(160,56) matrix(1,0,0,1,0,0) translate(-160,-56)"><g><rect fill="rgb(0,0,0)" stroke="none" x="0" y="0" width="200" height="20" fill-opacity="0"/></g></g><g transform="translate(160,56) matrix(1,0,0,1,0,0) translate(-160,-56)"><g><rect fill="rgb(0,0,0)" stroke="none" x="69" y="-1" width="63" height="21" fill-opacity="0"/></g></g><g transform="translate(160,56) matrix(1,0,0,1,0,0) translate(-160,-56)"><g><rect fill="rgb(0,0,0)" stroke="none" x="69" y="-1" width="63" height="21" fill-opacity="0"/></g><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="18px" font-style="normal" font-weight="normal" text-decoration="" line-height="20.5px" x="69" y="15">my</text><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="18px" font-style="normal" font-weight="normal" text-decoration="" line-height="20.5px" x="93" y="15">-</text><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="18px" font-style="normal" font-weight="normal" text-decoration="" line-height="20.5px" x="98" y="15">web</text></g><g transform="translate(160,56) matrix(1,0,0,1,0,0) translate(-160,-56)"><g><rect fill="rgb(0,0,0)" stroke="none" x="0" y="20" width="200" height="20" fill-opacity="0"/></g></g><g transform="translate(160,56) matrix(1,0,0,1,0,0) translate(-160,-56)"><g><rect fill="rgb(0,0,0)" stroke="none" x="11" y="19" width="178" height="21" fill-opacity="0"/></g></g><g transform="translate(160,56) matrix(1,0,0,1,0,0) translate(-160,-56)"><g><rect fill="rgb(0,0,0)" stroke="none" x="11" y="19" width="178" height="21" fill-opacity="0"/></g><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="18px" font-style="normal" font-weight="normal" text-decoration="" line-height="20.5px" x="11" y="35">3</text><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="18px" font-style="normal" font-weight="normal" text-decoration="" line-height="20.5px" x="26" y="35">replica</text><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="18px" font-style="normal" font-weight="normal" text-decoration="" line-height="20.5px" x="84" y="35">nginx</text><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="18px" font-style="normal" font-weight="normal" text-decoration="" line-height="20.5px" x="132" y="35">service</text></g></g><g transform="matrix(1,0,0,1,70.3301472918966,224.20369466145834)"><g transform="translate(0,0)"><g transform="translate(-79.99998474121094,-257.15277099609375) translate(9.669837449314343,32.94907633463541) matrix(1,0,0,1,0,0)"><g><path fill="none" stroke="#254356" d="M 75.3301472918966 269.13194106831963 M 75.3301472918966 269.13194106831963 L 78.30449045482098 268.7404276596541 M 78.30449045482098 268.7404276596541 M 81.27883361774536 268.3489142509885 L 84.25317678066975 267.95740084232295 M 84.25317678066975 267.95740084232295 M 87.22751994359413 267.5658874336574 L 90.20186310651852 267.17437402499183 M 90.20186310651852 267.17437402499183 M 93.1762062694429 266.7828606163263 L 96.15054943236728 266.3913472076607 M 96.15054943236728 266.3913472076607 M 99.12489259529167 265.99983379899516 L 102.09923575821605 265.6083203903296 M 102.09923575821605 265.6083203903296 M 105.07357892114044 265.21680698166404 L 108.04792208406482 264.8252935729985 M 108.04792208406482 264.8252935729985 M 111.0222652469892 264.4337801643329 L 113.99660840991359 264.04226675566736 M 113.99660840991359 264.04226675566736 M 116.97095157283798 263.6507533470018 L 119.94529473576236 263.25923993833624 M 119.94529473576236 263.25923993833624 M 122.91963789868674 262.8677265296707 L 125.89398106161113 262.4762131210051 M 125.89398106161113 262.4762131210051 M 128.8683242245355 262.08469971233956 L 131.8426673874599 261.693186303674 M 131.8426673874599 261.693186303674 M 134.81701055038428 261.30167289500844 L 137.79135371330867 260.9101594863429 M 137.79135371330867 260.9101594863429 M 140.76569687623305 260.5186460776773 L 143.74004003915744 260.12713266901176 M 143.74004003915744 260.12713266901176 M 146.71438320208182 259.7356192603462 L 149.6887263650062 259.34410585168064 M 149.6887263650062 259.34410585168064 M 152.6630695279306 258.9525924430151 L 155.63741269085497 258.5610790343495 M 155.63741269085497 258.5610790343495 M 158.61175585377936 258.16956562568396 L 161.58609901670374 257.7780522170184 M 161.58609901670374 257.7780522170184 M 164.56044217962813 257.38653880835284 L 167.5347853425525 256.9950253996873 M 167.5347853425525 256.9950253996873 M 170.5091285054769 256.6035119910217 L 173.48347166840128 256.2119985823561 M 173.48347166840128 256.2119985823561 M 176.45781483132566 255.8204851736905 L 179.43215799425005 255.42897176502493 M 179.43215799425005 255.42897176502493 M 182.40650115717443 255.03745835635934 L 185.38084432009882 254.64594494769375 M 185.38084432009882 254.64594494769375 M 188.3551874830232 254.25443153902816 L 191.32953064594759 253.86291813036257 M 191.32953064594759 253.86291813036257 M 194.30387380887197 253.47140472169698 L 197.27821697179635 253.0798913130314 M 197.27821697179635 253.0798913130314 M 200.25256013472074 252.6883779043658 L 203.22690329764512 252.29686449570022 M 203.22690329764512 252.29686449570022 M 206.2012464605695 251.90535108703463 L 209.1755896234939 251.51383767836904 M 209.1755896234939 251.51383767836904 M 212.14993278641828 251.12232426970346 L 215.12427594934266 250.73081086103787 M 215.12427594934266 250.73081086103787 M 218.09861911226704 250.33929745237228 L 221.07296227519143 249.9477840437067 M 221.07296227519143 249.9477840437067 M 224.0473054381158 249.5562706350411 L 227.0216486010402 249.1647572263755 M 227.0216486010402 249.1647572263755 M 229.99599176396458 248.77324381770993 L 232.97033492688897 248.38173040904434 M 232.97033492688897 248.38173040904434 M 235.94467808981335 247.99021700037875 L 238.91902125273774 247.59870359171316 M 238.91902125273774 247.59870359171316 M 241.89336441566212 247.20719018304757 L 244.8677075785865 246.81567677438198 M 244.8677075785865 246.81567677438198 M 247.8420507415109 246.4241633657164 L 250.81639390443527 246.0326499570508 M 250.81639390443527 246.0326499570508 M 253.79073706735966 245.64113654838522 L 256.76508023028407 245.24962313971963 M 256.76508023028407 245.24962313971963 M 259.7394233932085 244.85810973105404 L 262.7137665561329 244.46659632238845 M 262.7137665561329 244.46659632238845 M 265.6881097190573 244.07508291372287 L 268.6624528819817 243.68356950505728 M 268.6624528819817 243.68356950505728 M 271.63679604490613 243.2920560963917 L 274.61113920783055 242.9005426877261 M 274.61113920783055 242.9005426877261 M 277.58548237075496 242.5090292790605 L 280.5598255336794 242.11751587039493 M 280.5598255336794 242.11751587039493 M 283.5341686966038 241.72600246172934 L 286.5085118595282 241.33448905306375 M 286.5085118595282 241.33448905306375 M 289.4828550224526 240.94297564439816 L 292.457198185377 240.55146223573257 M 292.457198185377 240.55146223573257 M 295.43154134830144 240.15994882706698 L 298.40588451122585 239.7684354184014 M 298.40588451122585 239.7684354184014 M 301.38022767415026 239.3769220097358 L 304.3545708370747 238.98540860107022 M 304.3545708370747 238.98540860107022 M 307.3289139999991 238.59389519240463 L 310.3032571629235 238.20238178373904 M 310.3032571629235 238.20238178373904 M 313.2776003258479 237.81086837507345 L 316.2519434887723 237.41935496640787 M 316.2519434887723 237.41935496640787 M 319.22628665169674 237.02784155774228 L 322.20062981462115 236.6363281490767 M 322.20062981462115 236.6363281490767 M 325.17497297754556 236.2448147404111 L 328.14931614047 235.8533013317455 M 328.14931614047 235.8533013317455 M 331.1236593033944 235.46178792307992 L 334.0980024663188 235.07027451441434 M 334.0980024663188 235.07027451441434 M 337.0723456292432 234.67876110574875 L 340.04668879216763 234.28724769708316 M 340.04668879216763 234.28724769708316 M 343.02103195509204 233.89573428841757 L 345.99537511801645 233.50422087975198 M 345.99537511801645 233.50422087975198 M 348.96971828094087 233.1127074710864 L 351.9440614438653 232.7211940624208 M 351.9440614438653 232.7211940624208 M 354.9184046067897 232.32968065375522 L 357.8927477697141 231.93816724508963 M 357.8927477697141 231.93816724508963 M 360.8670909326385 231.54665383642404 L 363.84143409556293 231.15514042775845 M 363.84143409556293 231.15514042775845 M 366.81577725848734 230.76362701909284 L 369.79012042141176 230.37211361042722 M 369.79012042141176 230.37211361042722 M 372.76446358433617 229.98060020176163 L 375.7388067472606 229.58908679309602 M 375.7388067472606 229.58908679309602" stroke-miterlimit="10" stroke-width="3"/></g></g></g></g><g transform="matrix(1,0,0,1,369.99998474121094,224.15277099609375)"><g transform="translate(0,0)"><g transform="translate(-407.99998474121094,-243.15277099609375) translate(38,19) matrix(1,0,0,1,0,0)"><g><path fill="none" stroke="#254356" d="M 374.99998474121094 229.15277099609375 M 374.99998474121094 229.15277099609375 L 377.97135025984255 229.56627668491436 M 377.97135025984255 229.56627668491436 M 380.94271577847417 229.97978237373496 L 383.9140812971058 230.39328806255557 M 383.9140812971058 230.39328806255557 M 386.8854468157374 230.80679375137618 L 389.856812334369 231.22029944019678 M 389.856812334369 231.22029944019678 M 392.8281778530006 231.6338051290174 L 395.79954337163224 232.047310817838 M 395.79954337163224 232.047310817838 M 398.77090889026385 232.4608165066586 L 401.74227440889547 232.8743221954792 M 401.74227440889547 232.8743221954792 M 404.7136399275271 233.28782788429982 L 407.6850054461587 233.70133357312042 M 407.6850054461587 233.70133357312042 M 410.6563709647903 234.11483926194103 L 413.6277364834219 234.52834495076164 M 413.6277364834219 234.52834495076164 M 416.59910200205354 234.94185063958224 L 419.57046752068516 235.35535632840285 M 419.57046752068516 235.35535632840285 M 422.54183303931677 235.76886201722346 L 425.5131985579484 236.18236770604406 M 425.5131985579484 236.18236770604406 M 428.48456407658 236.59587339486467 L 431.4559295952116 237.00937908368527 M 431.4559295952116 237.00937908368527 M 434.42729511384323 237.42288477250588 L 437.39866063247484 237.8363904613265 M 437.39866063247484 237.8363904613265 M 440.37002615110646 238.2498961501471 L 443.3413916697381 238.6634018389677 M 443.3413916697381 238.6634018389677 M 446.3127571883697 239.0769075277883 L 449.2841227070013 239.4904132166089 M 449.2841227070013 239.4904132166089 M 452.2554882256329 239.90391890542952 L 455.22685374426453 240.31742459425013 M 455.22685374426453 240.31742459425013 M 458.19821926289615 240.73093028307073 L 461.16958478152776 241.14443597189134 M 461.16958478152776 241.14443597189134 M 464.1409503001594 241.55794166071195 L 467.112315818791 241.97144734953255 M 467.112315818791 241.97144734953255 M 470.0836813374226 242.38495303835316 L 473.0550468560542 242.79845872717377 M 473.0550468560542 242.79845872717377 M 476.02641237468583 243.21196441599437 L 478.99777789331745 243.62547010481498 M 478.99777789331745 243.62547010481498 M 481.96914341194906 244.0389757936356 L 484.9405089305807 244.4524814824562 M 484.9405089305807 244.4524814824562 M 487.9118744492123 244.86598717127683 L 490.8832399678439 245.27949286009743 M 490.8832399678439 245.27949286009743 M 493.8546054864755 245.69299854891807 L 496.82597100510714 246.10650423773868 M 496.82597100510714 246.10650423773868 M 499.79733652373875 246.52000992655928 L 502.76870204237036 246.93351561537992 M 502.76870204237036 246.93351561537992 M 505.740067561002 247.34702130420055 L 508.7114330796336 247.76052699302116 M 508.7114330796336 247.76052699302116 M 511.6827985982652 248.17403268184177 L 514.6541641168968 248.5875383706624 M 514.6541641168968 248.5875383706624 M 517.6255296355284 249.001044059483 L 520.59689515416 249.41454974830364 M 520.59689515416 249.41454974830364 M 523.5682606727917 249.82805543712425 L 526.5396261914233 250.24156112594488 M 526.5396261914233 250.24156112594488 M 529.5109917100549 250.6550668147655 L 532.4823572286865 251.0685725035861 M 532.4823572286865 251.0685725035861 M 535.4537227473181 251.48207819240673 L 538.4250882659497 251.89558388122734 M 538.4250882659497 251.89558388122734 M 541.3964537845814 252.30908957004797 L 544.367819303213 252.72259525886858 M 544.367819303213 252.72259525886858 M 547.3391848218446 253.13610094768921 L 550.3105503404762 253.54960663650982 M 550.3105503404762 253.54960663650982 M 553.2819158591078 253.96311232533046 L 556.2532813777394 254.37661801415106 M 556.2532813777394 254.37661801415106 M 559.224646896371 254.7901237029717 L 562.1960124150027 255.2036293917923 M 562.1960124150027 255.2036293917923 M 565.1673779336343 255.6171350806129 L 568.1387434522659 256.03064076943355 M 568.1387434522659 256.03064076943355 M 571.1101089708975 256.4441464582542 L 574.0814744895291 256.8576521470748 M 574.0814744895291 256.8576521470748 M 577.0528400081607 257.27115783589545 L 580.0242055267923 257.6846635247161 M 580.0242055267923 257.6846635247161 M 582.995571045424 258.0981692135367 L 585.9669365640556 258.51167490235736 M 585.9669365640556 258.51167490235736 M 588.9383020826872 258.925180591178 L 591.9096676013188 259.3386862799986 M 591.9096676013188 259.3386862799986 M 594.8810331199504 259.75219196881926 L 597.852398638582 260.1656976576399 M 597.852398638582 260.1656976576399 M 600.8237641572136 260.57920334646053 L 603.7951296758453 260.99270903528117 M 603.7951296758453 260.99270903528117 M 606.7664951944769 261.4062147241018 L 609.7378607131085 261.81972041292244 M 609.7378607131085 261.81972041292244 M 612.7092262317401 262.23322610174307 L 615.6805917503717 262.6467317905637 M 615.6805917503717 262.6467317905637 M 618.6519572690033 263.06023747938434 L 621.623322787635 263.4737431682049 M 621.623322787635 263.4737431682049 M 624.5946883062666 263.88724885702555 L 627.5660538248982 264.30075454584613 M 627.5660538248982 264.30075454584613 M 630.5374193435298 264.71426023466677 L 633.5087848621614 265.12776592348735 M 633.5087848621614 265.12776592348735 M 636.480150380793 265.541271612308 L 639.4515158994246 265.95477730112856 M 639.4515158994246 265.95477730112856 M 642.4228814180562 266.3682829899492 L 645.3942469366879 266.7817886787698 M 645.3942469366879 266.7817886787698 M 648.3656124553195 267.19529436759035 L 651.3369779739511 267.608800056411 M 651.3369779739511 267.608800056411 M 654.3083434925827 268.02230574523156 L 657.2797090112143 268.4358114340522 M 657.2797090112143 268.4358114340522 M 660.2510745298459 268.8493171228728 L 663.2224400484776 269.2628228116934 M 663.2224400484776 269.2628228116934 M 666.1938055671092 269.676328500514 L 669.1651710857408 270.0898341893346 M 669.1651710857408 270.0898341893346" stroke-miterlimit="10" stroke-width="3"/></g></g></g></g><g transform="matrix(1,0,0,1,373.66664632161456,222.7879785817978)"><g transform="translate(0,0)"><g transform="translate(-107.99998474121094,-177.1527709960937) translate(-265.6666615804036,-45.63520758570411) matrix(1,0,0,1,0,0)"><g><path fill="none" stroke="#254356" d="M 378.66664632161456 270 M 378.66664632161456 270 L 378.66664632161456 267 M 378.66664632161456 267 M 378.66664632161456 264 L 378.66664632161456 261 M 378.66664632161456 261 M 378.66664632161456 258 L 378.66664632161456 255 M 378.66664632161456 255 M 378.66664632161456 252 L 378.66664632161456 249 M 378.66664632161456 249 M 378.66664632161456 246 L 378.66664632161456 243 M 378.66664632161456 243 M 378.66664632161456 240 L 378.66664632161456 237 M 378.66664632161456 237 M 378.66664632161456 234 L 378.66664632161456 231 M 378.66664632161456 231 M 378.66664632161456 228 L 378.66664632161456 227.7879785817978" stroke-miterlimit="10" stroke-width="3"/></g></g></g></g><g transform="matrix(1,0,0,1,253,184)"><g transform="translate(378,56) matrix(1,0,0,1,0,0) translate(-378,-56)"><g><rect fill="rgb(0,0,0)" stroke="none" x="0" y="0" width="271" height="40" fill-opacity="0"/></g></g><g transform="translate(378,56) matrix(1,0,0,1,0,0) translate(-378,-56)"><g><rect fill="rgb(0,0,0)" stroke="none" x="0" y="0" width="271" height="20" fill-opacity="0"/></g></g><g transform="translate(378,56) matrix(1,0,0,1,0,0) translate(-378,-56)"><g><rect fill="rgb(0,0,0)" stroke="none" x="105" y="-1" width="63" height="21" fill-opacity="0"/></g></g><g transform="translate(378,56) matrix(1,0,0,1,0,0) translate(-378,-56)"><g><rect fill="rgb(0,0,0)" stroke="none" x="105" y="-1" width="63" height="21" fill-opacity="0"/></g><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="18px" font-style="normal" font-weight="normal" text-decoration="" line-height="20.5px" x="105" y="15">my</text><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="18px" font-style="normal" font-weight="normal" text-decoration="" line-height="20.5px" x="129" y="15">-</text><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="18px" font-style="normal" font-weight="normal" text-decoration="" line-height="20.5px" x="134" y="15">web</text></g><g transform="translate(378,56) matrix(1,0,0,1,0,0) translate(-378,-56)"><g><rect fill="rgb(0,0,0)" stroke="none" x="0" y="20" width="271" height="20" fill-opacity="0"/></g></g><g transform="translate(378,56) matrix(1,0,0,1,0,0) translate(-378,-56)"><g><rect fill="rgb(0,0,0)" stroke="none" x="84" y="19" width="104" height="21" fill-opacity="0"/></g></g><g transform="translate(378,56) matrix(1,0,0,1,0,0) translate(-378,-56)"><g><rect fill="rgb(0,0,0)" stroke="none" x="84" y="19" width="104" height="21" fill-opacity="0"/></g><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="18px" font-style="normal" font-weight="normal" text-decoration="" line-height="20.5px" x="84" y="35">VIP</text><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="18px" font-style="normal" font-weight="normal" text-decoration="" line-height="20.5px" x="113" y="35">:</text><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="18px" font-style="normal" font-weight="normal" text-decoration="" line-height="20.5px" x="123" y="35">10</text><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="18px" font-style="normal" font-weight="normal" text-decoration="" line-height="20.5px" x="143" y="35">.</text><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="18px" font-style="normal" font-weight="normal" text-decoration="" line-height="20.5px" x="148" y="35">0</text><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="18px" font-style="normal" font-weight="normal" text-decoration="" line-height="20.5px" x="158" y="35">.</text><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="18px" font-style="normal" font-weight="normal" text-decoration="" line-height="20.5px" x="163" y="35">9</text><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="18px" font-style="normal" font-weight="normal" text-decoration="" line-height="20.5px" x="173" y="35">.</text><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="18px" font-style="normal" font-weight="normal" text-decoration="" line-height="20.5px" x="178" y="35">2</text></g></g><g transform="matrix(1,0,0,1,103,287)"><g transform="translate(118,-2) matrix(1,0,0,1,0,0) translate(-118,2)"><g><rect fill="rgb(0,0,0)" stroke="none" x="0" y="0" width="210" height="20" fill-opacity="0"/></g></g><g transform="translate(118,-2) matrix(1,0,0,1,0,0) translate(-118,2)"><g><rect fill="rgb(0,0,0)" stroke="none" x="0" y="0" width="210" height="20" fill-opacity="0"/></g></g><g transform="translate(118,-2) matrix(1,0,0,1,0,0) translate(-118,2)"><g><rect fill="rgb(0,0,0)" stroke="none" x="59" y="-1" width="93" height="21" fill-opacity="0"/></g></g><g transform="translate(118,-2) matrix(1,0,0,1,0,0) translate(-118,2)"><g><rect fill="rgb(0,0,0)" stroke="none" x="59" y="-1" width="93" height="21" fill-opacity="0"/></g><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="18px" font-style="normal" font-weight="normal" text-decoration="" line-height="20.5px" x="59" y="15">my</text><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="18px" font-style="normal" font-weight="normal" text-decoration="" line-height="20.5px" x="83" y="15">-</text><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="18px" font-style="normal" font-weight="normal" text-decoration="" line-height="20.5px" x="89" y="15">network</text></g></g><g transform="matrix(1,0,0,1,400,286)"><g transform="translate(118,-2) matrix(1,0,0,1,0,0) translate(-118,2)"><g><rect fill="rgb(0,0,0)" stroke="none" x="0" y="0" width="210" height="20" fill-opacity="0"/></g></g><g transform="translate(118,-2) matrix(1,0,0,1,0,0) translate(-118,2)"><g><rect fill="rgb(0,0,0)" stroke="none" x="0" y="0" width="210" height="20" fill-opacity="0"/></g></g><g transform="translate(118,-2) matrix(1,0,0,1,0,0) translate(-118,2)"><g><rect fill="rgb(0,0,0)" stroke="none" x="59" y="-1" width="93" height="21" fill-opacity="0"/></g></g><g transform="translate(118,-2) matrix(1,0,0,1,0,0) translate(-118,2)"><g><rect fill="rgb(0,0,0)" stroke="none" x="59" y="-1" width="93" height="21" fill-opacity="0"/></g><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="18px" font-style="normal" font-weight="normal" text-decoration="" line-height="20.5px" x="59" y="15">my</text><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="18px" font-style="normal" font-weight="normal" text-decoration="" line-height="20.5px" x="83" y="15">-</text><text fill="rgb(37, 67, 86)" stroke="none" font-family="Arial" font-size="18px" font-style="normal" font-weight="normal" text-decoration="" line-height="20.5px" x="89" y="15">network</text></g></g></g></svg>

\ No newline at end of file

new file mode 100644

@@ -0,0 +1,308 @@

+<!--[metadata]>

+title = "Attach services to an overlay network"

+description = "Use swarm mode networking features"

+keywords = ["guide", "swarm mode", "swarm", "network"]

+[menu.main]

+identifier="networking-guide"

+parent="engine_swarm"

+weight=16

+<![end-metadata]-->

+

+# Attach services to an overlay network

+

+Docker Engine swarm mode natively supports **overlay networks**, so you can

+enable container-to-container networks. When you use swarm mode, you don't need

+an external key-value store. Features of swarm mode overlay networks include the

+following:

+

+* You can attach multiple services to the same network.

+* By default, **service discovery** assigns a virtual IP address (VIP) and DNS

+entry to each service in the swarm, making it available by its service name to

+containers on the same network.

+* You can configure the service to use DNS round-robin instead of a VIP.

+

+In order to use overlay networks in the swarm, you need to have the following

+ports open between the swarm nodes before you enable swarm mode:

+

+* Port `7946` TCP/UDP for container network discovery.

+* Port `4789` UDP for the container overlay network.

+

+## Create an overlay network in a swarm

+

+When you run Docker Engine in swarm mode, you can run `docker network create`

+from a manager node to create an overlay network. For instance, to create a

+network named `my-network`:

+

+```

+$ docker network create \

+  --driver overlay \

+  --subnet 10.0.9.0/24 \

+  --opt encrypted \

+  my-network

+

+273d53261bcdfda5f198587974dae3827e947ccd7e74a41bf1f482ad17fa0d33

+```

+

+By default nodes in the swarm encrypt traffic between themselves and other

+nodes. The optional `--opt encrypted` flag enables an additional layer of

+encryption in the overlay driver for vxlan traffic between containers on

+different nodes. For more information, refer to [Docker swarm mode overlay network security model](../userguide/networking/overlay-security-model.md).

+

+The `--subnet` flag specifies the subnet for use with the overlay network. When

+you don't specify a subnet, the swarm manager automatically chooses a subnet and

+assigns it to the network. On some older kernels, including kernel 3.10,

+automatically assigned adresses may overlap with another subnet in your

+infrastructure. Such overlaps can cause connectivity issues or failures with containers connected to the network.

+

+Before you attach a service to the network, the network only extends to manager

+nodes. You can run `docker network ls` to view the network:

+

+```bash

+$ docker network ls

+

+NETWORK ID          NAME        DRIVER   SCOPE

+f9145f09b38b        bridge      bridge   local

+..snip..

+bd0befxwiva4        my-network  overlay  swarm

+```

+

+The `swarm` scope indicates that the network is available for use with services

+deployed to the swarm. After you create a service attached to the network, the

+swarm only extends the network to worker nodes where the scheduler places tasks

+for the service. On workers without tasks running for a service attached to the

+network, `network ls` does not display the network.

+

+## Attach a service to an overlay network

+

+To attach a service to an overlay network, pass the `--network` flag when you

+create a service. For example to create an nginx service attached to a

+network called `my-network`:

+

+```bash

+$ docker service create \

+  --replicas 3 \

+  --name my-web \

+  --network my-network \

+  nginx

+```

+

+>**Note:** You have to create the network before you can attach a service to it.

+

+The containers for the tasks in the service can connect to one another on the

+overlay network. The swarm extends the network to all the nodes with `Running`

+tasks for the service.

+

+From a manager node, run `docker service ps <SERVICE>` to view the nodes where

+tasks are running for the service:

+

+```bash

+$ docker service ps my-web

+

+ID                         NAME      IMAGE  NODE   DESIRED STATE  CURRENT STATE               ERROR

+63s86gf6a0ms34mvboniev7bs  my-web.1  nginx  node1  Running        Running 58 seconds ago

+6b3q2qbjveo4zauc6xig7au10  my-web.2  nginx  node2  Running        Running 58 seconds ago

+66u2hcrz0miqpc8h0y0f3v7aw  my-web.3  nginx  node3  Running        Running about a minute ago

+```

+

+![service vip image](images/service-vip.png)

+

+You can inspect the network from any node with a `Running` task for a service

+attached to the network:

+

+```bash

+$ docker network inspect <NETWORK>

+```

+

+The network information includes a list of the containers on the node that are

+attached to the network. For instance:

+

+```bash

+$ docker network inspect my-network

+[

+    {

+        "Name": "my-network",

+        "Id": "7m2rjx0a97n88wzr4nu8772r3",

+        "Scope": "swarm",

+        "Driver": "overlay",

+        "EnableIPv6": false,

+        "IPAM": {

+            "Driver": "default",

+            "Options": null,

+            "Config": [

+                {

+                    "Subnet": "10.0.9.0/24",

+                    "Gateway": "10.0.9.1"

+                }

+            ]

+        },

+        "Internal": false,

+        "Containers": {

+            "404d1dec939a021678132a35259c3604b9657649437e59060621a17edae7a819": {

+                "Name": "my-web.1.63s86gf6a0ms34mvboniev7bs",

+                "EndpointID": "3c9588d04db9bc2bf8749cb079689a3072c44c68e544944cbea8e4bc20eb7de7",

+                "MacAddress": "02:42:0a:00:09:03",

+                "IPv4Address": "10.0.9.3/24",

+                "IPv6Address": ""

+            }

+        },

+        "Options": {

+            "com.docker.network.driver.overlay.vxlanid_list": "257"

+        },

+        "Labels": {}

+    }

+]

+```

+

+In the example above, the container `my-web.1.63s86gf6a0ms34mvboniev7bs` for the

+`my-web` service is attached to the `my-network` network on node2.

+

+## Use swarm mode service discovery

+

+By default, when you create a service attached to a network, the swarm assigns

+the service a VIP. The VIP maps to a DNS alias based upon the service name.

+Containers on the network share DNS mappings for the service via gossip so any container on the network can access the service via its service

+name.

+

+You don't need to expose service-specific ports to make the service

+available to other services on the same overlay network. The swarm's internal

+load balancer automatically distributes requests to the service VIP among the

+active tasks.

+

+You can inspect the service to view the virtual IP. For example:

+

+```bash

+$ docker service inspect \

+  --format='{{json .Endpoint.VirtualIPs}}' \

+  my-web

+

+[{"NetworkID":"7m2rjx0a97n88wzr4nu8772r3" "Addr":"10.0.0.2/24"}]

+```

+

+The following example shows how you can add a `busybox` service on the same

+network as the `nginx` service and the busybox service is able to access `nginx`

+using the DNS name `my-web`:

+

+1. From a manager node, deploy a busybox service to the same network as

+`my-web`:

+

+    ```bash

+    $ docker service create \

+      --name my-busybox \

+      --network my-network \

+      busybox \

+      sleep 3000

+    ```

+

+2. Lookup the node where `my-busybox` is running:

+

+    ```bash

+    $ docker service ps my-busybox

+

+    ID                         NAME          IMAGE    NODE   DESIRED STATE  CURRENT STATE          ERROR

+    1dok2cmx2mln5hbqve8ilnair  my-busybox.1  busybox  node1  Running        Running 5 seconds ago

+    ```

+

+3. From the node where the busybox task is running, open an interactive shell to

+the busybox container:

+

+    ```bash

+    $ docker exec -it my-busybox.1.1dok2cmx2mln5hbqve8ilnair /bin/sh

+    ```

+

+    You can deduce the container name as `<TASK-NAME>`+`<ID>`. Alternatively,

+    you can run `docker ps` on the node where the task is running.

+

+4. From inside the busybox container, query the DNS to view the VIP for the

+`my-web` service:

+

+    ```bash

+    $ nslookup my-web

+

+    Server:    127.0.0.11

+    Address 1: 127.0.0.11

+

+    Name:      my-web

+    Address 1: 10.0.9.2 ip-10-0-9-2.us-west-2.compute.internal

+    ```

+

+    >**Note:** the examples here use `nslookup`, but you can use `dig` or any

+    available DNS query tool.

+

+5. From inside the busybox container, query the DNS using a special query

+<tasks.SERVICE-NAME> to find the IP addresses of all the containers for the

+`my-web` service:

+

+    ```bash

+    $ nslookup tasks.my-web

+

+    Server:    127.0.0.11

+    Address 1: 127.0.0.11

+

+    Name:      tasks.my-web

+    Address 1: 10.0.9.4 my-web.2.6b3q2qbjveo4zauc6xig7au10.my-network

+    Address 2: 10.0.9.3 my-web.1.63s86gf6a0ms34mvboniev7bs.my-network

+    Address 3: 10.0.9.5 my-web.3.66u2hcrz0miqpc8h0y0f3v7aw.my-network

+    ```

+

+6. From inside the busybox container, run `wget` to access the nginx web server

+running in the `my-web` service:

+

+    ```bash

+    $ wget -O- my-web

+

+    Connecting to my-web (10.0.9.2:80)

+    <!DOCTYPE html>

+    <html>

+    <head>

+    <title>Welcome to nginx!</title>

+    ...snip...

+    ```

+

+    The swarm load balancer automatically routes the HTTP request to the

+    service's VIP to an active task. It distributes subsequent requests to

+    other tasks using round-robin selection.

+

+## Use DNS round-robin for a service

+

+You can configure the service to use DNS round-robin directly without using a

+VIP, by setting the `--endpoint-mode dnsrr` when you create the service. DNS round-robin is useful in cases where you want to use your own load balancer.

+

+The following example shows a service with `dnsrr` endpoint mode:

+

+```bash

+$ docker service create \

+  --replicas 3 \

+  --name my-dnsrr-service \

+  --network my-network \

+  --endpoint-mode dnsrr \

+  nginx

+```

+

+When you query the DNS for the service name, the DNS service returns the IP

+addresses for all the task containers:

+

+```bash

+$ nslookup my-dnsrr-service

+Server:    127.0.0.11

+Address 1: 127.0.0.11

+

+Name:      my-dnsrr

+Address 1: 10.0.9.8 my-dnsrr-service.1.bd3a67p61by5dfdkyk7kog7pr.my-network

+Address 2: 10.0.9.10 my-dnsrr-service.3.0sb1jxr99bywbvzac8xyw73b1.my-network

+Address 3: 10.0.9.9 my-dnsrr-service.2.am6fx47p3bropyy2dy4f8hofb.my-network

+```

+

+## Confirm VIP connectivity

+

+In genaral we recommend you use `dig`, `nslookup`, or another DNS query tool to

+test access to the service name via DNS. Because a VIP is a logical IP, `ping`

+is not the right tool to confirm VIP connectivity.

+

+## Learn More

+

+* [Deploy services to a swarm](services.md)

+* [Swarm administration guide](admin_guide.md)

+* [Docker Engine command line reference](../reference/commandline/index.md)

+* [Swarm mode tutorial](swarm-tutorial/index.md)

@@ -213,8 +213,9 @@ $ docker service create \

 The swarm extends `my-network` to each node running the service.

-<!-- TODO when overlay-security-model is published

-For more information, refer to [Note on Docker 1.12 Overlay Network Security Model](../userguide/networking/overlay-security-model.md).-->

+For more information on overlay networking and service discovery, refer to

+[Attach services to an overlay network](networking.md). See also

+[Docker swarm mode overlay network security model](../userguide/networking/overlay-security-model.md).

 ## Configure update behavior

deleted file mode 100644

@@ -1,538 +0,0 @@

-<!--[metadata]>

-+++

-title = "Docker container networking"

-description = "How do we connect docker containers within and across hosts ?"

-keywords = ["Examples, Usage, network, docker, documentation, user guide, multihost, cluster"]

-[menu.main]

-parent = "smn_networking"

-weight = -5

-+++

-<![end-metadata]-->

-

-# Understand Docker container networks

-

-To build web applications that act in concert but do so securely, use the Docker

-networks feature. Networks, by definition, provide complete isolation for

-containers. So, it is important to have control over the networks your

-applications run on. Docker container networks give you that control.

-

-This section provides an overview of the default networking behavior that Docker

-Engine delivers natively. It describes the type of networks created by default

-and how to create your own, user-defined networks. It also describes the

-resources required to create networks on a single host or across a cluster of

-hosts.

-

-## Default Networks

-

-When you install Docker, it creates three networks automatically. You can list

-these networks using the `docker network ls` command:

-

-```

-$ docker network ls

-

-NETWORK ID          NAME                DRIVER

-7fca4eb8c647        bridge              bridge

-9f904ee27bf5        none                null

-cf03ee007fb4        host                host

-```

-

-Historically, these three networks are part of Docker's implementation. When

-you run a container you can use the `--network` flag to specify which network you

-want to run a container on. These three networks are still available to you.

-

-The `bridge` network represents the `docker0` network present in all Docker

-installations. Unless you specify otherwise with the `docker run

-by default. You can see this bridge as part of a host's network stack by using

-the `ifconfig` command on the host.

-

-```

-$ ifconfig

-

-docker0   Link encap:Ethernet  HWaddr 02:42:47:bc:3a:eb  

-          inet addr:172.17.0.1  Bcast:0.0.0.0  Mask:255.255.0.0

-          inet6 addr: fe80::42:47ff:febc:3aeb/64 Scope:Link

-          UP BROADCAST RUNNING MULTICAST  MTU:9001  Metric:1

-          RX packets:17 errors:0 dropped:0 overruns:0 frame:0

-          TX packets:8 errors:0 dropped:0 overruns:0 carrier:0

-          collisions:0 txqueuelen:0

-          RX bytes:1100 (1.1 KB)  TX bytes:648 (648.0 B)

-```

-

-The `none` network adds a container to a container-specific network stack. That container lacks a network interface. Attaching to such a container and looking at its stack you see this:

-

-```

-$ docker attach nonenetcontainer

-

-root@0cb243cd1293:/# cat /etc/hosts

-127.0.0.1	localhost

-::1	localhost ip6-localhost ip6-loopback

-fe00::0	ip6-localnet

-ff00::0	ip6-mcastprefix

-ff02::1	ip6-allnodes

-ff02::2	ip6-allrouters

-root@0cb243cd1293:/# ifconfig

-lo        Link encap:Local Loopback  

-          inet addr:127.0.0.1  Mask:255.0.0.0

-          inet6 addr: ::1/128 Scope:Host

-          UP LOOPBACK RUNNING  MTU:65536  Metric:1

-          RX packets:0 errors:0 dropped:0 overruns:0 frame:0

-          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0

-          collisions:0 txqueuelen:0

-          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

-

-root@0cb243cd1293:/#

-```

->**Note**: You can detach from the container and leave it running with `CTRL-p CTRL-q`.

-

-The `host` network adds a container on the hosts network stack. You'll find the

-network configuration inside the container is identical to the host.

-

-With the exception of the `bridge` network, you really don't need to

-interact with these default networks. While you can list and inspect them, you

-cannot remove them. They are required by your Docker installation. However, you

-can add your own user-defined networks and these you can remove when you no

-longer need them. Before you learn more about creating your own networks, it is

-worth looking at the default `bridge` network a bit.

-

-

-### The default bridge network in detail

-The default `bridge` network is present on all Docker hosts. The `docker network inspect`

-command returns information about a network:

-

-```

-$ docker network inspect bridge

-

-[

-   {

-       "Name": "bridge",

-       "Id": "f7ab26d71dbd6f557852c7156ae0574bbf62c42f539b50c8ebde0f728a253b6f",

-       "Scope": "local",

-       "Driver": "bridge",

-       "IPAM": {

-           "Driver": "default",

-           "Config": [

-               {

-                   "Subnet": "172.17.0.1/16",

-                   "Gateway": "172.17.0.1"

-               }

-           ]

-       },

-       "Containers": {},

-       "Options": {

-           "com.docker.network.bridge.default_bridge": "true",

-           "com.docker.network.bridge.enable_icc": "true",

-           "com.docker.network.bridge.enable_ip_masquerade": "true",

-           "com.docker.network.bridge.host_binding_ipv4": "0.0.0.0",

-           "com.docker.network.bridge.name": "docker0",

-           "com.docker.network.driver.mtu": "9001"

-       }

-   }

-]

-```

-The Engine automatically creates a `Subnet` and `Gateway` to the network.

-The `docker run` command automatically adds new containers to this network.

-

-```

-$ docker run -itd --name=container1 busybox

-

-3386a527aa08b37ea9232cbcace2d2458d49f44bb05a6b775fba7ddd40d8f92c

-

-$ docker run -itd --name=container2 busybox

-

-94447ca479852d29aeddca75c28f7104df3c3196d7b6d83061879e339946805c

-```

-

-Inspecting the `bridge` network again after starting two containers shows both newly launched containers in the network. Their ids show up in the "Containers" section of `docker network inspect`:

-

-```

-$ docker network inspect bridge

-

-{[

-    {

-        "Name": "bridge",

-        "Id": "f7ab26d71dbd6f557852c7156ae0574bbf62c42f539b50c8ebde0f728a253b6f",

-        "Scope": "local",

-        "Driver": "bridge",

-        "IPAM": {

-            "Driver": "default",

-            "Config": [

-                {

-                    "Subnet": "172.17.0.1/16",

-                    "Gateway": "172.17.0.1"

-                }

-            ]

-        },

-        "Containers": {

-            "3386a527aa08b37ea9232cbcace2d2458d49f44bb05a6b775fba7ddd40d8f92c": {

-                "EndpointID": "647c12443e91faf0fd508b6edfe59c30b642abb60dfab890b4bdccee38750bc1",

-                "MacAddress": "02:42:ac:11:00:02",

-                "IPv4Address": "172.17.0.2/16",

-                "IPv6Address": ""

-            },

-            "94447ca479852d29aeddca75c28f7104df3c3196d7b6d83061879e339946805c": {

-                "EndpointID": "b047d090f446ac49747d3c37d63e4307be745876db7f0ceef7b311cbba615f48",

-                "MacAddress": "02:42:ac:11:00:03",

-                "IPv4Address": "172.17.0.3/16",

-                "IPv6Address": ""

-            }

-        },

-        "Options": {

-            "com.docker.network.bridge.default_bridge": "true",

-            "com.docker.network.bridge.enable_icc": "true",

-            "com.docker.network.bridge.enable_ip_masquerade": "true",

-            "com.docker.network.bridge.host_binding_ipv4": "0.0.0.0",

-            "com.docker.network.bridge.name": "docker0",

-            "com.docker.network.driver.mtu": "9001"

-        }

-    }

-]

-```

-

-The `docker network inspect` command above shows all the connected containers and their network resources on a given network. Containers in this default network are able to communicate with each other using IP addresses. Docker does not support automatic service discovery on the default bridge network. If you want to communicate with container names in this default bridge network, you must connect the containers via the legacy `docker run --link` option.

-

-You can `attach` to a running `container` and investigate its configuration:

-

-```

-$ docker attach container1

-

-root@0cb243cd1293:/# ifconfig

-ifconfig

-eth0      Link encap:Ethernet  HWaddr 02:42:AC:11:00:02  

-          inet addr:172.17.0.2  Bcast:0.0.0.0  Mask:255.255.0.0

-          inet6 addr: fe80::42:acff:fe11:2/64 Scope:Link

-          UP BROADCAST RUNNING MULTICAST  MTU:9001  Metric:1

-          RX packets:16 errors:0 dropped:0 overruns:0 frame:0

-          TX packets:8 errors:0 dropped:0 overruns:0 carrier:0

-          collisions:0 txqueuelen:0

-          RX bytes:1296 (1.2 KiB)  TX bytes:648 (648.0 B)

-

-lo        Link encap:Local Loopback  

-          inet addr:127.0.0.1  Mask:255.0.0.0

-          inet6 addr: ::1/128 Scope:Host

-          UP LOOPBACK RUNNING  MTU:65536  Metric:1

-          RX packets:0 errors:0 dropped:0 overruns:0 frame:0

-          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0

-          collisions:0 txqueuelen:0

-          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

-```

-

-Then use `ping` for about 3 seconds to test the connectivity of the containers on this `bridge` network.

-

-```

-root@0cb243cd1293:/# ping -w3 172.17.0.3

-

-PING 172.17.0.3 (172.17.0.3): 56 data bytes

-64 bytes from 172.17.0.3: seq=0 ttl=64 time=0.096 ms

-64 bytes from 172.17.0.3: seq=1 ttl=64 time=0.080 ms

-64 bytes from 172.17.0.3: seq=2 ttl=64 time=0.074 ms

-

-3 packets transmitted, 3 packets received, 0% packet loss

-round-trip min/avg/max = 0.074/0.083/0.096 ms

-```

-

-Finally, use the `cat` command to check the `container1` network configuration:

-

-```

-root@0cb243cd1293:/# cat /etc/hosts

-

-172.17.0.2	3386a527aa08

-127.0.0.1	localhost

-::1	localhost ip6-localhost ip6-loopback

-fe00::0	ip6-localnet

-ff00::0	ip6-mcastprefix

-ff02::1	ip6-allnodes

-ff02::2	ip6-allrouters

-```

-To detach from a `container1` and leave it running use `CTRL-p CTRL-q`.Then, attach to `container2` and repeat these three commands.

-

-```

-$ docker attach container2

-

-root@0cb243cd1293:/# ifconfig

-

-eth0      Link encap:Ethernet  HWaddr 02:42:AC:11:00:03  

-          inet addr:172.17.0.3  Bcast:0.0.0.0  Mask:255.255.0.0

-          inet6 addr: fe80::42:acff:fe11:3/64 Scope:Link

-          UP BROADCAST RUNNING MULTICAST  MTU:9001  Metric:1

-          RX packets:15 errors:0 dropped:0 overruns:0 frame:0

-          TX packets:13 errors:0 dropped:0 overruns:0 carrier:0

-          collisions:0 txqueuelen:0

-          RX bytes:1166 (1.1 KiB)  TX bytes:1026 (1.0 KiB)

-

-lo        Link encap:Local Loopback  

-          inet addr:127.0.0.1  Mask:255.0.0.0

-          inet6 addr: ::1/128 Scope:Host

-          UP LOOPBACK RUNNING  MTU:65536  Metric:1

-          RX packets:0 errors:0 dropped:0 overruns:0 frame:0

-          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0

-          collisions:0 txqueuelen:0

-          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

-

-root@0cb243cd1293:/# ping -w3 172.17.0.2

-

-PING 172.17.0.2 (172.17.0.2): 56 data bytes

-64 bytes from 172.17.0.2: seq=0 ttl=64 time=0.067 ms

-64 bytes from 172.17.0.2: seq=1 ttl=64 time=0.075 ms

-64 bytes from 172.17.0.2: seq=2 ttl=64 time=0.072 ms

-

-3 packets transmitted, 3 packets received, 0% packet loss

-round-trip min/avg/max = 0.067/0.071/0.075 ms

-/ # cat /etc/hosts

-172.17.0.3	94447ca47985

-127.0.0.1	localhost

-::1	localhost ip6-localhost ip6-loopback

-fe00::0	ip6-localnet

-ff00::0	ip6-mcastprefix

-ff02::1	ip6-allnodes

-ff02::2	ip6-allrouters

-```

-

-The default `docker0` bridge network supports the use of port mapping and `docker run --link` to allow communications between containers in the `docker0` network. These techniques are cumbersome to set up and prone to error. While they are still available to you as techniques, it is better to avoid them and define your own bridge networks instead.

-

-## User-defined networks

-

-You can create your own user-defined networks that better isolate containers.

-Docker provides some default **network drivers** for creating these

-networks. You can create a new **bridge network** or **overlay network**. You

-can also create a **network plugin** or **remote network**  written to your own

-specifications.

-

-You can create multiple networks. You can add containers to more than one

-network. Containers can only communicate within networks but not across

-networks. A container attached to two networks can communicate with member

-containers in either network. When a container is connected to multiple

-networks, its external connectivity is provided via the first non-internal

-network, in lexical order.

-

-The next few sections describe each of Docker's built-in network drivers in

-greater detail.

-

-### A bridge network

-

-The easiest user-defined network to create is a `bridge` network. This network

-is similar to the historical, default `docker0` network. There are some added

-features and some old features that aren't available.

-

-```

-$ docker network create --driver bridge isolated_nw

-1196a4c5af43a21ae38ef34515b6af19236a3fc48122cf585e3f3054d509679b

-

-$ docker network inspect isolated_nw

-

-[

-    {

-        "Name": "isolated_nw",

-        "Id": "1196a4c5af43a21ae38ef34515b6af19236a3fc48122cf585e3f3054d509679b",

-        "Scope": "local",

-        "Driver": "bridge",

-        "IPAM": {

-            "Driver": "default",

-            "Config": [

-                {

-                    "Subnet": "172.21.0.0/16",

-                    "Gateway": "172.21.0.1"

-                }

-            ]

-        },

-        "Containers": {},

-        "Options": {}

-    }

-]

-

-$ docker network ls

-

-NETWORK ID          NAME                DRIVER

-9f904ee27bf5        none                null

-cf03ee007fb4        host                host

-7fca4eb8c647        bridge              bridge

-c5ee82f76de3        isolated_nw         bridge

-

-```

-

-After you create the network, you can launch containers on it using  the `docker run --network=<NETWORK>` option.

-

-```

-$ docker run --network=isolated_nw -itd --name=container3 busybox

-

-8c1a0a5be480921d669a073393ade66a3fc49933f08bcc5515b37b8144f6d47c

-

-$ docker network inspect isolated_nw

-[

-    {

-        "Name": "isolated_nw",

-        "Id": "1196a4c5af43a21ae38ef34515b6af19236a3fc48122cf585e3f3054d509679b",

-        "Scope": "local",

-        "Driver": "bridge",

-        "IPAM": {

-            "Driver": "default",

-            "Config": [

-                {}

-            ]

-        },

-        "Containers": {

-            "8c1a0a5be480921d669a073393ade66a3fc49933f08bcc5515b37b8144f6d47c": {

-                "EndpointID": "93b2db4a9b9a997beb912d28bcfc117f7b0eb924ff91d48cfa251d473e6a9b08",

-                "MacAddress": "02:42:ac:15:00:02",

-                "IPv4Address": "172.21.0.2/16",

-                "IPv6Address": ""

-            }

-        },

-        "Options": {}

-    }

-]

-```

-

-The containers you launch into this network must reside on the same Docker host.

-Each container in the network can immediately communicate with other containers

-in the network. Though, the network itself isolates the containers from external

-networks.

-

-![An isolated network](images/bridge_network.png)

-

-Within a user-defined bridge network, linking is not supported. You can

-expose and publish container ports on containers in this network. This is useful

-if you want to make a portion of the `bridge` network available to an outside

-network.

-

-![Bridge network](images/network_access.png)

-

-A bridge network is useful in cases where you want to run a relatively small

-network on a single host. You can, however, create significantly larger networks

-by creating an `overlay` network.

-

-

-### An overlay network

-

-Docker's `overlay` network driver supports multi-host networking natively

-out-of-the-box. This support is accomplished with the help of `libnetwork`, a

-built-in VXLAN-based overlay network driver, and Docker's `libkv` library.

-

-The `overlay` network requires a valid key-value store service. Currently,

-Docker's `libkv` supports Consul, Etcd, and ZooKeeper (Distributed store). Before

-creating a network you must install and configure your chosen key-value store

-service. The Docker hosts that you intend to network and the service must be

-able to communicate.

-

-![Key-value store](images/key_value.png)

-

-Each host in the network must run a Docker Engine instance. The easiest way to

-provision the hosts are with Docker Machine.

-

-![Engine on each host](images/engine_on_net.png)

-

-You should open the following ports between each of your hosts.

-

-| Protocol | Port | Description           |

-|----------|------|-----------------------|

-| udp      | 4789 | Data plane (VXLAN)    |

-| tcp/udp  | 7946 | Control plane         |

-

-Your key-value store service may require additional ports.

-Check your vendor's documentation and open any required ports.

-

-Once you have several machines provisioned, you can use Docker Swarm to quickly

-form them into a swarm which includes a discovery service as well.

-

-To create an overlay network, you configure options on  the `daemon` on each

-Docker Engine for use with `overlay` network. There are three options to set:

-

-<table>

-    <thead>

-    <tr>

-        <th>Option</th>

-        <th>Description</th>

-    </tr>

-    </thead>

-    <tbody>

-    <tr>

-        <td><pre>--cluster-store=PROVIDER://URL</pre></td>

-        <td>Describes the location of the KV service.</td>

-    </tr>

-    <tr>

-        <td><pre>--cluster-advertise=HOST_IP|HOST_IFACE:PORT</pre></td>

-        <td>The IP address or interface of the HOST used for clustering.</td>

-    </tr>

-    <tr>

-        <td><pre>--cluster-store-opt=KEY-VALUE OPTIONS</pre></td>

-        <td>Options such as TLS certificate or tuning discovery Timers</td>

-    </tr>

-    </tbody>

-</table>

-

-Create an `overlay` network on one of the machines in the swarm.

-

-    $ docker network create --driver overlay my-multi-host-network

-

-This results in a single network spanning multiple hosts. An `overlay` network

-provides complete isolation for the containers.

-

-![An overlay network](images/overlay_network.png)

-

-Then, on each host, launch containers making sure to specify the network name.

-

-    $ docker run -itd --network=my-multi-host-network busybox

-

-Once connected, each container has access to all the containers in the network

-regardless of which Docker host the container was launched on.

-

-![Published port](images/overlay-network-final.png)

-

-If you would like to try this for yourself, see the [Getting started for

-overlay](get-started-overlay.md).

-

-### Custom network plugin

-

-If you like, you can write your own network driver plugin. A network

-driver plugin makes use of Docker's plugin infrastructure. In this

-infrastructure, a plugin is a process running on the same Docker host as the

-Docker `daemon`.

-

-Network plugins follow the same restrictions and installation rules as other

-plugins. All plugins make use of the plugin API. They have a lifecycle that

-encompasses installation, starting, stopping and activation.

-

-Once you have created and installed a custom network driver, you use it like the

-built-in network drivers. For example:

-

-    $ docker network create --driver weave mynet

-

-You can inspect it, add containers to and from it, and so forth. Of course,

-different plugins may make use of different technologies or frameworks. Custom

-networks can include features not present in Docker's default networks. For more

-information on writing plugins, see [Extending Docker](../../extend/index.md) and

-[Writing a network driver plugin](../../extend/plugins_network.md).

-

-### Docker embedded DNS server

-

-Docker daemon runs an embedded DNS server to provide automatic service discovery

-for containers connected to user defined networks. Name resolution requests from

-the containers are handled first by the embedded DNS server. If the embedded DNS

-server is unable to resolve the request it will be forwarded to any external DNS

-servers configured for the container. To facilitate this when the container is

-created, only the embedded DNS server reachable at `127.0.0.11` will be listed

-in the container's `resolv.conf` file. More information on embedded DNS server on

-user-defined networks can be found in the [embedded DNS server in user-defined networks]

-(configure-dns.md)

-

-## Links

-

-Before the Docker network feature, you could use the Docker link feature to

-allow containers to discover each other.  With the introduction of Docker networks,

-containers can be discovered by its name automatically. But you can still create

-links but they behave differently when used in the default `docker0` bridge network

-compared to user-defined networks. For more information, please refer to

-[Legacy Links](default_network/dockerlinks.md) for link feature in default `bridge` network

-and the [linking containers in user-defined networks](work-with-networks.md#linking-containers-in-user-defined-networks) for links

-functionality in user-defined networks.

-

-## Related information

-

-- [Work with network commands](work-with-networks.md)

-- [Get started with multi-host networking](get-started-overlay.md)

-- [Managing Data in Containers](../../tutorials/dockervolumes.md)

-- [Docker Machine overview](https://docs.docker.com/machine)

-- [Docker Swarm overview](https://docs.docker.com/swarm)

-- [Investigate the LibNetwork project](https://github.com/docker/libnetwork)

@@ -54,6 +54,7 @@ $ $ docker service create --replicas 2 --network my-multi-host-network --name my

 Overlay networks for a swarm are not available to unmanaged containers. For more information refer to [Docker swarm mode overlay network security model](overlay-security-model.md).

+See also [Attach services to an overlay network](../../swarm/networking.md). 

 ## Overlay networking with an external key-value store

@@ -437,6 +437,8 @@ Overlay networks for a swarm are not available to containers started with

 `docker run` that don't run as part of a swarm mode service. For more

 information refer to [Docker swarm mode overlay network security model](overlay-security-model.md).