Use tc to throttle Docker container's outgoing network bandwidth

I’m trying to do the bandwidth throttling to the Docker containers.
To limit the downlink bandwidth, I can first find the veth interface of the container and use tc: tc qdisc add dev vethpair1 root tbf rate 1mbit latency 50ms burst 10000. If I want to limit the uplink bandwidth, I need to specify --cap-add=NET_ADMIN when I spin up the container and use the same tc command on eth0 inside the container. Is there any non-intrusive way to do it, so that I can administrate any container without giving it privilege?

  • Openshift node fails to start
  • Docker ignores patterns in .dockerignore
  • How to mount a directory in docker container to host
  • How about manage system dependencies when using azk?
  • How do you list volumes in docker containers?
  • Docker port forwarding between container and host
  • Copy directory before update and import after compile.
  • how to create a volume in docker with filesystem?
  • Stack/Docker/IHaskell weird behaviour
  • How to free wasted space used by docker?
  • How to configure gitlab for gradle multimodule project
  • Why is nginx returning a 502 when doing a `uwsgi_pass` to a linked docker container?
  • One Solution collect form web for “Use tc to throttle Docker container's outgoing network bandwidth”

    You could tell Docker to use LXC under the hoods : use the -e lxcoption.

    Create your containers with a custom LXC directive to put them into a **traffic class** :
    
    `docker run --lxc-conf="lxc.cgroup.net_cls.classid = 0x00100001" your/image /bin/stuff` 
    

    Check the official documentation about how to apply bandwidth limits to this class.

    Note : the --storage-driver=devicemapperand -e lxcoptions are for the Docker daemon, not for the Docker client you’re using when running docker run ........

    ALso you can do this through this:

    mkdir /var/run/netns
    ln -sf /proc/`docker inspect -f '{{ .State.Pid }}' YOUR_CONTAINER`/ns/net /var/run/netns/SOME_NAME
    ip netns exec SOME_NAME iptables -L -nv
    
    Docker will be the best open platform for developers and sysadmins to build, ship, and run distributed applications.