For performance and usability (=dynamically reconfigure haproxy front- and backends on the fly without having to modify the systemd unit file that launches the container) I have a haproxy:2.5
container running using --net host
that does SSL termination and load balancing.
Now, I want to access other containers on the host (e.g. a nginx
container) from inside the haproxy container... but that doesn't work. Since we're running in the host network, the haproxy container uses the /etc/hosts
from the host container (obviously) and so "nginx" does not resolve to anything.
I tried creating a separate network local-services
which I can attach to the application containers, but attaching it to the haproxy
container yields this error:
container sharing network namespace with another container or host cannot be connected to any other network
Is there any other way I can get both dynamic frontend ports in haproxy and connecting to application containers from inside haproxy, other than using e.g. -p 10.0.10.1:8080:80
on the container and 10.0.10.1:8080
in the haproxy backend specification?