I have service which runs in several different containers. Lets say I have
Service.BackEnd
Service.Database
Service.Messaging
Service.UserInterface
Is it possible to have one virtual adapter / switch for all of them, so they communicate with each other but without any access from outside. And separate Virtual Adapter / Virtual Switch for Service.UserInterface, as it should be accessible outside.
Yes. You can set this all up in Network and Virtual Switch and your container. It’s quite powerful. I’m not an expert on it, but what you want to do is definitely doable.
Absolutely, it’s doable.
From what you’ve described, it looks like all these services are part of one unified application. In such cases, I prefer to group them together in a single docker-compose file and connect them through a dedicated Docker network. To handle external access, I typically deploy an Nginx reverse proxy within the setup. I connect it to both the internal Docker network and a separate network interface tied to one of my VLANs—this way, it avoids using the NAS’s primary interface directly.