Network namespace
A network namespace is an isolated operating-system networking context with its own network interfaces, routes, ports, and related resources.
Kubernetes in Action, Second Edition
A network namespace is a Linux namespace that isolates network interfaces, protocol stacks, ports, and related networking resources.
- How it is used
- Provides isolated networking for processes while letting containers in a Kubernetes pod share interfaces, IP addresses, and ports.
- How deep it goes
- Defines isolated network resources and explains interface membership and pod-level sharing, without detailing namespace setup commands.
- Examples
- Illustrates two processes sharing an IP address and port space, then containers sharing interfaces inside a pod.
- What you can do after
- Evaluate/understand why containers in one pod can share an IP address yet conflict over ports, while different pods do not.
Read how Kubernetes in Action, Second Edition explains network namespace →
Podman in Action: Secure, rootless containers for Kubernetes, microservices, and more
A network namespace is a Linux namespace that provides an isolated view of network devices and network configuration.
- How it is used
- Isolates container network views and controls which containers can communicate through Podman-managed networks.
- How deep it goes
- Explains virtual devices, rootless relaying, TAP devices, and network assignment, but does not detail firewall configuration.
- Examples
- Demonstrates net1 and net2, container-name resolution, cross-network ping failure, and the --net=host option.
- What you can do after
- Operate/configure Podman networks that isolate containers or deliberately expose host networking.
Related concepts
- podused by · A Kubernetes Pod is the smallest deployable unit in Kubernetes, grouping one or more co-located containers that share networking and other resources.
- Podmanused by · Podman is a daemonless, open-source container engine for building, running, and managing containers and container images.
- containerused by · A software container is an isolated execution environment that packages an application and its dependencies while sharing the host operating system kernel.
- Docker Composeproduced by · Docker Compose is a tool for defining and running applications composed of multiple containers through declarative configuration.
- linux namespacekind of · A Linux namespace is a kernel mechanism that gives processes isolated views of selected system resources, such as processes, networks, or filesystem mounts.
These guides are generated from the text of Manning books by Manning's knowledge graph and link to the sections they draw on. The full books are available on liveBook and at manning.com.