DCA · Question #110
Will this command ensure that overlay traffic between service tasks is encrypted? Solution: docker network create -d overlay -o encrypted=true <network-name>
The correct answer is A. Yes. The docker network create command, when specifying an overlay driver and the encrypted=true option, encrypts all Swarm service traffic on that network.
Question
Will this command ensure that overlay traffic between service tasks is encrypted? Solution: docker network create -d overlay -o encrypted=true <network-name>
Options
- AYes
- BNo
How the community answered
(19 responses)- A95% (18)
- B5% (1)
Why each option
The `docker network create` command, when specifying an overlay driver and the `encrypted=true` option, encrypts all Swarm service traffic on that network.
Yes. When creating a Docker overlay network using the `docker network create` command with the `-d overlay` driver and the `-o encrypted=true` option, all traffic between Swarm service tasks communicating over this specific network will be encrypted. This uses IPsec to secure data in transit between the nodes.
The `encrypted=true` option for overlay networks is specifically designed to enable encryption of traffic between service tasks on that network, utilizing built-in IPsec capabilities.
Concept tested: Docker Swarm overlay network encryption
Source: https://docs.docker.com/engine/reference/commandline/network_create/#overlay-network-options
Topics
Community Discussion
No community discussion yet for this question.