关于 docker swarm mode 的基本架构

How does it work? Docker! Part 1: Swarm general architecture

关于 Overlay Network

Demystifying Docker overlay networking

How does it work? Docker! Part 2: Swarm networking

关于服务发现与负载均衡（Service Discovery and Load Balancing）

How does it work? Docker! Part 3: Load balancing, service discovery and security!

Blocking ingress traffic to Docker swarm worker machines

关于 Rolling Updates 

Rolling updates with Docker Swarm

1) Pull the image specified in the docker service update command

2) Remove the current (now old) container from its internal load balancer

3) Send a SIGTERM signal to the container and give it a grace period of 10 seconds to exit gracefully. If after 10 seconds the service hasn’t yet given up, Docker will terminate the process with a SIGKILL signal. Both the signal and the grace period can be tweaked with the --stop-signal and the --stop-grace-period flags when creating/updating the service

3) Start the new container

4) Add the new container to its internal load balancer