Sobes.tech
Senior

What happens if you run a container with --network=host?

sobes.tech AI

Answer from AI

When launching a container with the --network=host option, the container uses the host's network stack directly, without isolation. This means that all network interfaces and ports of the container match those of the host. As a result:

  • The container can listen on the same ports as the host without port forwarding.
  • Network overhead is reduced since there is no NAT or bridge interfaces.
  • Isolation is decreased, which may impact security.

Example of launching:

docker run --network=host myimage

This mode is useful when you want the container to operate as part of the host network, for example, for monitoring or applications requiring high network performance.