Docker EXPOSE a port only to Host

Question

Is docker capable of exposing a port only to the host and not to the outside.

I need to put a docker running with a mongo database, and I wanted that it was only accessible from the host, but I need to link the host port 27017.

Is this possible, or do the only possible way is to change firewall definitions?

Vince Bowdren · Accepted Answer · 2017-02-28 17:10:05Z

243

Sure, just bind it to localhost, like this:

docker run -p 127.0.0.1:27017:27017

Also: Your host can also talk to each container normally over its IP. Use docker inspect $ID to get a json dump (beside other stuff) containing the network IP.

edited Feb 28, 2017 at 17:10

Vince Bowdren

9,2853 gold badges37 silver badges61 bronze badges

answered Feb 28, 2014 at 16:34

ZeissS

12.2k4 gold badges38 silver badges50 bronze badges

Sign up to request clarification or add additional context in comments.

7 Comments

Ruben Over a year ago

So is it something like [1] docker run -p 27017:27017 -v /var/lib/mongodb/master:/data mongo:storage_test /usr/bin/start-mongo [2] docker run -p 127.0.0.1:27017:27017 ...?

ZeissS Over a year ago

The second option binds to localhost, yes. The first one makes the port publicly available. If you don't want a static port, use 127.0.0.1::27017.

bsimpson53 Over a year ago

This solution does not appear to work for swarm mode see this github issue

Groostav Over a year ago

is the equivalent docker-compose simply service-name: { ... ports: [ "127.0.0.1:27017:27017" ] }?

Tara Prasad Gurung Over a year ago

What is the problem in my docker-compose though bind to localhost only but It is publicly accessible. stackoverflow.com/questions/50621936/…

|

Collectives™ on Stack Overflow

Docker EXPOSE a port only to Host

1 Answer 1

7 Comments

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

7 Comments

Linked

Related