Networks in MedStack Control
An encrypted overlay network is automatically created when you create a swarm. By default this network is only accessible from other containers in the swarm.
Connections into the swarm from the internet
MedStack Control controls connections coming into the swarm from the internet through the managed Load Balancer service. By default, all connections coming in from the internet are blocked and only connections that pass through the managed Load Balancer are allowed. When a container opens a port using the normal technique (defined in a Dockerfile), the port is accessible on the overlay network but not from the internet. The Load Balancer section of the service configuration form lets you define which service can receive connections from the internet through the Load Balancer.
Only incoming HTTPS connections are supported. HTTP requests are automatically redirected to HTTPS.