Bridge vs host networking for latency-sensitive containers

papacket_tom12 hours ago1 replies

Benchmarked a UDP service under Docker's default bridge vs --network host. Host mode cut p99 by ~40µs. Is that the NAT/iptables path, or veth overhead?

Discussion

kekernel_ravi11 hours ago

Both, but mostly conntrack + NAT. Try bridge with userland-proxy disabled and you'll see part of the gap close. veth itself is cheap these days.