Does Azure IoT Edge runtime and modules support host network mode?

Question

Hello everyone! could you help to figure out whether Azure IoT Edge runtime and modules support host network mode?
I tried the following methods, but it didn't work.

https://learn.microsoft.com/en-us/answers/questions/75596/iot-edge-module-add-hostconfig-for-networkmodehost.html

My deployment.json is as below:

{  
    "modulesContent": {  
        "$edgeAgent": {  
            "properties.desired": {  
                "modules": {  
                    "temp": {  
                        "settings": {  
                            "image": "mcr.microsoft.com/azureiotedge-simulated-temperature-sensor:1.1.3-linux-arm32v7",  
                            "createOptions": "{\"createOptions\":{\"NetworkingConfig\":{\"EndpointsConfig\":{\"host\":{}}},\"HostConfig\":{\"NetworkMode\":\"host\",\"Memory\":67108864,\"CpuPeriod\":50000}}}"  
                        },  
                        "type": "docker",  
                        "version": "1.0",  
                        "env": {  
                            "MessageCount": {  
                                "value": "-1"  
                            }  
                        },  
                        "status": "running",  
                        "restartPolicy": "always"  
                    }  
                },  
                "runtime": {  
                    "settings": {  
                        "minDockerVersion": "v1.25"  
                    },  
                    "type": "docker"  
                },  
                "schemaVersion": "1.0",  
                "systemModules": {  
                    "edgeAgent": {  
                        "settings": {  
                            "image": "mcr.microsoft.com/azureiotedge-agent:1.1.3-linux-arm32v7",  
                            "createOptions": "{\"createOptions\":{\"HostConfig\":{\"Memory\":67108864,\"CpuPeriod\":50000}}}"  
                        },  
                        "type": "docker"  
                    },  
                    "edgeHub": {  
                        "settings": {  
                            "image": "mcr.microsoft.com/azureiotedge-hub:1.1.3-linux-arm32v7",  
                            "createOptions": "{\"createOptions\":{\"HostConfig\":{\"Memory\":134217728,\"CpuPeriod\":50000,\"PortBindings\":{\"443/tcp\":[{\"HostPort\":\"8443\"}],\"5671/tcp\":[{\"HostPort\":\"5671\"}],\"8883/tcp\":[{\"HostPort\":\"8883\"}]}}}}"  
                        },  
                        "type": "docker",  
                        "status": "running",  
                        "restartPolicy": "always"  
                    }  
                }  
            }  
        },  
        "$edgeHub": {  
            "properties.desired": {  
                "routes": {  
                    "route": "FROM /messages/* INTO $upstream"  
                },  
                "schemaVersion": "1.0",  
                "storeAndForwardConfiguration": {  
                    "timeToLiveSecs": 7200  
                }  
            }  
        },  
        "temp": {  
            "properties.desired": {}  
        }  
    }  
}  

Answer 1

Hello @zhitian deng ,

normally, Azure IoT edge modules communicate in 'bridge mode' because this is a secure way to exchange data.

Host network mode seems to be working too, although this is not officially documented.

Your question is picked up by the Azure IoT Edge team in this thread https://github.com/Azure/iotedge/issues/5935

If you follow the links in these underlying threads, you see reports of users who claim it works for them.

Host network mode takes away part of the 'sandbox' experience where docker containers only have access to host resources when officially granted. Personally, I have experienced that granting access in individual cases gives me more control over the containers without limiting the usability.

Think twice if this is really what you want. What is your use case?