docker-network-graph/docker-net-graph.py

#!/usr/bin/python3
import os
import json
import argparse
import random
from docker import Client
from graphviz import Graph

# colorlover.scales["12"]["qual"]["Paired"] converted to hex strings
COLORS = ["#1f78b4", "#33a02c", "#e31a1c", "#ff7f00", "#6a3d9a", "#b15928", "#a6cee3", "#b2df8a", "#fdbf6f",
          "#cab2d6", "#ffff99"]
i = 0


def get_unique_color():
    global i

    if i < len(COLORS):
        c = COLORS[i]
        i += 1
    else:
        # Generate random color if we've already used the 12 preset ones
        c = "#%06x".format(random.randint(0, 0xFFFFFF))

    return c


def generate_graph(verbose: bool, file: str):
    g = Graph(comment="Docker Network Graph", engine="sfdp", format="png",
              graph_attr=dict(splines="true"))

    docker_client = Client(os.environ.get("DOCKER_HOST", "unix:///var/run/docker.sock"))

    def dump_json(obj):
        print(json.dumps(obj, indent=4))

    for c in docker_client.containers():
        name = c["Names"][0][1:]
        container_id = c["Id"]

        node_id = f"container_{container_id}"

        iface_labels = []

        for net_name, net_info in c["NetworkSettings"]["Networks"].items():
            label_iface = f"<{net_info['EndpointID']}> {net_info['IPAddress']}"

            iface_labels.append(label_iface)

        labels = "|".join(iface_labels)
        if verbose:
            print(labels)

        g.node(node_id,
               shape="record",
               label=f"{{ {name} | { {labels} } }}",
               fillcolor="#ff9999",
               style="filled"
               )

    for net in sorted(docker_client.networks(), key=lambda k: k["Name"]):
        net_name = net["Name"]
        color = get_unique_color()

        try:
            gateway = net["IPAM"]["Config"][0]["Gateway"]
        except (KeyError, IndexError):
            # This network doesn't seem to be used, skip it
            continue

        internal = ""
        try:
            if net["Internal"]:
                internal = "| Internal"
        except KeyError:
            pass

        isolated = ""
        try:
            if net["Options"]["com.docker.network.bridge.enable_icc"] == "false":
                isolated = "| Containers isolated"
        except KeyError:
            pass

        if verbose:
            print(f"Network: {net_name} {internal} gw:{gateway}")

        net_node_id = f"net_{net_name}"

        label = f"{{<gw_iface> {gateway} | {net_name} {internal} {isolated}}}"

        g.node(net_node_id,
               shape="record",
               label=label,
               fillcolor=color,
               style="filled"
               )

        if net["Containers"]:
            for container_id, container in sorted(net["Containers"].items()):
                if verbose:
                    dump_json(container)
                    print(" * ", container["Name"], container["IPv4Address"], container["IPv6Address"])

                container_node_id = f"container_{container_id}"

                container_iface_ref = f"{container_node_id}:{container['EndpointID']}"

                g.edge(container_iface_ref, f"{net_node_id}:gw_iface", color=color)

    print(g.source)
    if file:
        g.render(file)


if __name__ == "__main__":
    parser = argparse.ArgumentParser(description="Generate docker network graph.")
    parser.add_argument("-v", "--verbose", help="Verbose output", action="store_true")
    parser.add_argument("-o", "--out", help="Write output to file", type=str)
    args = parser.parse_args()

    generate_graph(args.verbose, args.out)