What is Docker host networking?

Short answer

Host networking mode removes network isolation between the container and the host. The container shares the host network stack directly, providing better performance but less isolation.

How it works

When a container uses the host network driver, it does not get its own IP address. Instead, it binds directly to the host interfaces. This eliminates NAT overhead and can significantly improve network throughput for high-performance applications.

Example

docker run -d --name nginx --network host nginx

In this mode, Nginx binds directly to port 80 on the host without requiring -p mapping.

Why it matters

Host networking is useful for applications that need to handle a very large number of connections or require low-latency networking. It is also necessary when the container needs to access network interfaces or protocols that are difficult to map through NAT.

Key differences

• bridge: Container gets private IP; port mapping required.
• host: No private IP; direct host network access.
• none: No external network access.

Common issues

• Port conflicts are more likely since containers share the host port space.
• Reduced security due to lack of network isolation.
• Host networking is only available on Linux hosts.