Should I run docker with the --net=host key?

Question

Docker

If I don't want to mess around with ports, does it make sense to just run everything in --net=host mode instead of forwarding them? Are there any downsides to this mode?

Answer 1

The processes will simply run on the same networking stack as the rest of the system. In all other senses (pid, file system, etc.) they will be isolated from each other in the same way. There is nothing fundamentally wrong with this, but I don’t see much point in doing so. In simple configurations, docker will destroy all forwarding itself, and in complex ones, alternative network configurations are often used instead of bridge (for example, macvlan).