# Multiple, isolated managed rancher networks

**URL:** <https://forums.suse.com/t/multiple-isolated-managed-rancher-networks/1770>\
**Category:** Rancher 1.x\
**Created:** [February 19, 2016, 9:17am UTC](https://forums.suse.com/t/multiple-isolated-managed-rancher-networks/1770 "2016-02-19T09:17:46Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![danielhuhn](https://avatars.discourse-cdn.com/v4/letter/d/5f8ce5/32.png) [@danielhuhn](https://forums.suse.com/u/danielhuhn)\
**Post date:** [February 19, 2016, 9:17am UTC](https://forums.suse.com/t/multiple-isolated-managed-rancher-networks/1770/1 "2016-02-19T09:17:46Z")

</div>

We would like to have multiple managed rancher networks. That would be possible using different rancher environments, however we need some services to be in two environments at the same time.

Something like this:

```
[Internet] --> LoadBalancer (Network 1) --> Application Server (Network 1 + 2) --> Database (Network 2)

```

I tried to put the database into a different stack, however the managed network spans across stacks, at least when I know the specific managed IP adress of the database container in the other stack. So this does not work as a isolation mechanism.

What would be the best route to go if I want to create a setup like this?

---

<div class="post-metadata">

**Author:** ![denise](https://avatars.discourse-cdn.com/v4/letter/d/82dd89/32.png) [@denise](https://forums.suse.com/u/denise)\
**Post date:** [February 23, 2016, 5:17am UTC](https://forums.suse.com/t/multiple-isolated-managed-rancher-networks/1770/2 "2016-02-23T05:17:50Z")

</div>

Currently, Rancher doesn’t support multiple managed rancher networks. In the future, we are considering adding this. I recommend creating a feature request for this in Github.

But I don’t believe any service will be available in 2 different environments. With the current managed network, we look as environments as completely separate resource pools and nothing would overlap.

---

<div class="post-metadata">

**Author:** ![danielhuhn](https://avatars.discourse-cdn.com/v4/letter/d/5f8ce5/32.png) [@danielhuhn](https://forums.suse.com/u/danielhuhn)\
**Post date:** [March 25, 2016, 6:13pm UTC](https://forums.suse.com/t/multiple-isolated-managed-rancher-networks/1770/3 "2016-03-25T18:13:31Z")

</div>

I just found this response [Cross-host intercontainer communication trouble](http://forums.suse.com/t/cross-host-intercontainer-communication-trouble/426/20) from the docker team.  
Seems like one could set up such isolated networks be tweaking the physical connections between the hosts.

---

<div class="post-metadata">

**Author:** ![vincent](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/vincent/32/7156_2.png) [@vincent](https://forums.suse.com/u/vincent)\
**Post date:** [March 25, 2016, 6:25pm UTC](https://forums.suse.com/t/multiple-isolated-managed-rancher-networks/1770/4 "2016-03-25T18:25:35Z")

</div>

If you’re referring to me, @denise and I work for Rancher, not Docker.

Yes you can create “islands” of hosts that can communicate with each other but not hosts in other islands with physical networking or firewalling. But I don’t think that really helps you because you can’t have any one container “on” more than one island.

---

<div class="post-metadata">

**Author:** ![danielhuhn](https://avatars.discourse-cdn.com/v4/letter/d/5f8ce5/32.png) [@danielhuhn](https://forums.suse.com/u/danielhuhn)\
**Post date:** [March 25, 2016, 6:42pm UTC](https://forums.suse.com/t/multiple-isolated-managed-rancher-networks/1770/5 "2016-03-25T18:42:18Z")

</div>

Yeah, Rancher not Docker, sorry 😉

Wouldn’t it be possible to do so with such a networking setup:  
 ![](https://us1.discourse-cdn.com/flex022/uploads/suse/original/2X/b/bf8eade63e6b7d12712e27fb1d3befc9764c6394.png)  
In this case the App-Server should be in both networks: one with the loadbalancer and one with the database.

How does the Rancher overlay networks/agents connect to each other? Could this work?

---

<div class="post-metadata">

**Author:** ![vincent](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/vincent/32/7156_2.png) [@vincent](https://forums.suse.com/u/vincent)\
**Post date:** [March 25, 2016, 8:02pm UTC](https://forums.suse.com/t/multiple-isolated-managed-rancher-networks/1770/6 "2016-03-25T20:02:19Z")

</div>

As Denise said there is one managed network per environment, and a host can only be in one environment. So we don’t have any good way to do this today. Multiple networks and attaching containers to many networks is one option; we’ve also talked about disabling the default ability for any container to talk to any other and requiring explicit links as an option before: [https://github.com/rancher/rancher/issues/2817#issuecomment-172047720](https://github.com/rancher/rancher/issues/2817#issuecomment-172047720)

You can have a separate environments & host(s) for each thing you want isolated, but that doesn’t leave any way for the different tiers to talk to each other. Then you could publish the ports of those services to the public IPs of the hosts (which might be internal/non-routable), and then at that point there’s probably no reason to have them be isolated in the first place.

---

<div class="post-metadata">

**Author:** ![hwinkel](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/hwinkel/32/951_2.png) [@hwinkel](https://forums.suse.com/u/hwinkel)\
**Post date:** [April 16, 2016, 10:55am UTC](https://forums.suse.com/t/multiple-isolated-managed-rancher-networks/1770/7 "2016-04-16T10:55:14Z")

</div>

@danielhuhn just for interest, which tool your are using for documenting, seem purpose build and not plain “visio” ?  
thank you,

---

<div class="post-metadata">

**Author:** ![danielhuhn](https://avatars.discourse-cdn.com/v4/letter/d/5f8ce5/32.png) [@danielhuhn](https://forums.suse.com/u/danielhuhn)\
**Post date:** [April 17, 2016, 9:05am UTC](https://forums.suse.com/t/multiple-isolated-managed-rancher-networks/1770/8 "2016-04-17T09:05:27Z")

</div>

It the “datacenter designer” from [https://www.profitbricks.com/](https://www.profitbricks.com/)

You can model your cloud infrastructure using the shown visual editor there. Quite a cool thing 🙂
