docker - 容器删除后，主机映射给容器的端口为何并立即未回收利用？

Question

新建容器时映射某些端口，如下： docker run -d -p 22 -p 80 ubuntu /usr/sbin/sshd -D 主机将自动给容器的22和80映射两个端口，如： 0.0.0.0:49155-&gt;22/tcp, 0.0.0.0:49156-&gt;80/tcp 当该容器停止并且删除...

天蓬老师 · Answer

You can know by viewing the source codedocker / runtime / networkdriver / portallocator / portallocator.go Docker's dynamic range port is from 49153-65535

const (
    BeginPortRange = 49153
    EndPortRange   = 65535
)

The way to allocate ports is in increasing order. After reaching the maximum value, the cycle starts from the beginning

func nextPort(proto string) int {
    c := currentDynamicPort[proto] + 1
    if c > EndPortRange {
        c = BeginPortRange
    }
    currentDynamicPort[proto] = c
    return c
}

When the container is destroyed, the port will be released

func ReleasePort(ip net.IP, proto string, port int) error {
    .......

    allocated := defaultAllocatedPorts[proto]
    allocated.Remove(port)

    .......
}

Exception. findNextPort方法从nexPort方法返回的值中，挑一个没被使用的，如果找一圈没找到，抛出ErrAllPortsAllocated

func findNextPort(proto string, allocated *collections.OrderedIntSet) (int, error) {
    port := nextPort(proto)
    startSearchPort := port
    for allocated.Exists(port) {
        port = nextPort(proto)
        if startSearchPort == port {
            return 0, ErrAllPortsAllocated
        }
    }
    return port, nil
}

To sum up, the port has actually been released, but will not be used again immediately unless the port resources are very tight.

So what you see is normal, don’t worry (provided you need to use version v0.10 or above).
The feature of recycling ports was added in version v0.10. If it is lower than this version, after the port number reaches
, you can only restart DockerEndPortRange

Reference: https://github.com/dotcloud/docker/pull/4949