Ping loopback meme

broken image

They can also use network address translation (NAT).

broken image

This allows them to communicate to each other and the external world using their own IP addresses and a bridged and routed network. In contrast, rootfull containers use the Container Network Interface (CNI) plugins and specifically the bridge plugin. Rootless containers make use of the slirp4netns network mode. Without root privileges, network association is not allowed. To be succinct and simple, when running rootless containers, the container itself does not have an IP address.

broken image

For a more detailed understanding, I strongly recommend you check the official getting started documentation and tutorials and two other fantastic articles on Podman networking and Podman IP address leasing written by Brent Baude on Enable Sysadmin.

broken image

However, there are slight differences in how Podman manages rootfull and rootless containers and pods. Podman runs both rootfull and rootless containers, which is a great advantage.

broken image