CentOS服务器部署httpd官方Docker镜像后远程无法获取HTTP响应问题求助

Let’s walk through the most likely causes of this issue and how to fix them—since you’re using network_mode: host, the container is using your server’s network stack directly, so the problem is almost certainly tied to network access rules or how httpd is binding to network interfaces.

1. Check CentOS Firewall Rules (Most Common Culprit) #

Local access works, but remote doesn’t—this usually means your server’s firewall is blocking incoming traffic on port 80. Here’s how to test and fix it:

• Test temporarily: Stop the firewall service to see if that resolves the issue:

  sudo systemctl stop firewalld
  

  Try accessing the site from your laptop again. If it works, the firewall was the problem.
• Permanently open port 80:

  sudo firewall-cmd --add-port=80/tcp --permanent
  sudo firewall-cmd --reload
  

• If you’re using iptables instead of firewalld, check existing rules with:

  sudo iptables -L -n
  

  Add an allow rule for port 80 if missing:

  sudo iptables -A INPUT -p tcp --dport 80 -j ACCEPT
  

  Save the rules to persist after reboot (use sudo service iptables save or sudo iptables-save > /etc/sysconfig/iptables depending on your setup).

2. Verify httpd’s Listening Interface #

Even if you didn’t modify httpd.conf, it’s worth confirming the server is listening on all network interfaces (not just localhost):

• First, get your container ID/name:

  docker ps
  

• Then check the Listen directive in the container’s config:

  docker exec -it <your_httpd_container_id> cat /usr/local/apache2/conf/httpd.conf | grep -E "Listen "
  

• If the output is Listen 127.0.0.1:80, httpd is only accepting connections from the server itself. Fix this by:
  1. Copying the default config to your host machine:

     docker cp <your_httpd_container_id>:/usr/local/apache2/conf/httpd.conf ./httpd.conf
     

  2. Editing ./httpd.conf to change Listen 127.0.0.1:80 to Listen 0.0.0.0:80
  3. Updating your docker-compose.yml to mount this config file:

     services:
       httpd:
         image: httpd:2.4
         network_mode: host
         volumes:
           - ./httpd.conf:/usr/local/apache2/conf/httpd.conf
     

  4. Restart the container:

     docker-compose down && docker-compose up -d
     

3. Check Network Interface Binding #

Use ss or netstat to confirm httpd is listening on the correct address:

ss -tulpn | grep httpd

Look for a line like LISTEN 0 128 0.0.0.0:80 0.0.0.0:*—this means it’s listening on all interfaces. If you see 127.0.0.1:80 or a specific internal IP, that’s why remote access fails (follow step 2 to fix the Listen directive).

4. Check External Network Rules (If Applicable) #

If your CentOS server is behind a NAT (e.g., a cloud server with security groups, or a home router):

• Cloud servers: Ensure your cloud provider’s security group allows incoming TCP traffic on port 80 from your laptop’s IP (or all IPs, if you want public access).
• Home networks: Set up port forwarding on your router to send external port 80 traffic to your server’s internal IP address.

内容的提问来源于stack exchange，提问作者pkuGenuine