Amazon ECS – task networking

For Windows, task networking is limited to two modes, default and awsvpc.

The default uses Docker’s built-in virtual network, a Network Address Translation (NAT) mode on Windows. In the default mode, Docker Engine is responsible for creating and managing the host network on Windows, which is built on top of a Hyper-V virtual switch (vSwitch). That doesn’t mean the Hyper-V hypervisor role is installed; instead, it only uses networking capabilities. Each Windows container is connected to the Hyper-V vSwitch using a virtual network interface card (vNIC):

Figure 3.5 – The Docker network and Windows adapters

A simple north-south workflow traffic would be as follows:

1. Multiple Windows containers run within a standalone task with dynamic port enabled.
2. The data package is sent to the vNIC attached to the Windows container.
3. The data package is sent to the vSwitch, and Windows Network Address...