ASP.NET Core 6.0应用Docker启动报错：端口443被占用

问题场景 #

在Docker Desktop环境下，使用VS2022生成的默认Dockerfile部署ASP.NET Core 6.0 MVC「Weather Forecast」模板应用时，启动出现异常，提示无法绑定到https://[::]:443，地址已被占用。直接在容器内执行dotnet WebApplication1.dll命令也触发相同错误。

异常栈信息 #

Unhandled exception. System.IO.IOException: Failed to bind to address https://[::]:443: address already in use.
     ---> Microsoft.AspNetCore.Connections.AddressInUseException: Address already in use
     ---> System.Net.Sockets.SocketException (98): Address already in use
       at System.Net.Sockets.Socket.UpdateStatusAfterSocketErrorAndThrowException(SocketError error, String callerName)
       at System.Net.Sockets.Socket.DoBind(EndPoint endPointSnapshot, SocketAddress socketAddress)
       at System.Net.Sockets.Socket.Bind(EndPoint localEP)
       at Microsoft.AspNetCore.Server.Kestrel.Transport.Sockets.SocketTransportOptions.CreateDefaultBoundListenSocket(EndPoint endpoint)
       at Microsoft.AspNetCore.Server.Kestrel.Transport.Sockets.SocketConnectionListener.Bind()
       --- End of inner exception stack trace ---
       at Microsoft.AspNetCore.Server.Kestrel.Transport.Sockets.SocketConnectionListener.Bind()
       at Microsoft.AspNetCore.Server.Kestrel.Transport.Sockets.SocketTransportFactory.BindAsync(EndPoint endpoint, CancellationToken cancellationToken)
       at Microsoft.AspNetCore.Server.Kestrel.Core.Internal.Infrastructure.TransportManager.BindAsync(EndPoint endPoint, ConnectionDelegate connectionDelegate, EndpointConfig endpointConfig, CancellationToken cancellationToken)
       at Microsoft.AspNetCore.Server.Kestrel.Core.KestrelServerImpl.<>c__DisplayClass30_0`1.<StartAsync>g__OnBind|0>d.MoveNext()
    --- End of stack trace from previous location ---
       at Microsoft.AspNetCore.Server.Kestrel.Core.Internal.AddressBinder.BindEndpointAsync(ListenOptions endpoint, AddressBindContext context, CancellationToken cancellationToken)
       --- End of inner exception stack trace ---
       at Microsoft.AspNetCore.Server.Kestrel.Core.Internal.AddressBinder.BindEndpointAsync(ListenOptions endpoint, AddressBindContext context, CancellationToken cancellationToken)
       at Microsoft.AspNetCore.Server.Kestrel.Core.ListenOptions.BindAsync(AddressBindContext context, CancellationToken cancellationToken)
       at Microsoft.AspNetCore.Server.Kestrel.Core.AnyIPListenOptions.BindAsync(AddressBindContext context, CancellationToken cancellationToken)
       at Microsoft.AspNetCore.Server.Kestrel.Core.Internal.AddressBinder.AddressesStrategy.BindAsync(AddressBindContext context, CancellationToken cancellationToken)
       at Microsoft.AspNetCore.Server.Kestrel.Core.Internal.AddressBinder.BindAsync(IEnumerable`1 listenOptions, AddressBindContext context, CancellationToken cancellationToken)
       at Microsoft.AspNetCore.Server.Kestrel.Core.KestrelServerImpl.BindAsync(CancellationToken cancellationToken)
       at Microsoft.AspNetCore.Server.Kestrel.Core.KestrelServerImpl.StartAsync[TContext](IHttpApplication`1 application, CancellationToken cancellationToken)
       at Microsoft.AspNetCore.Hosting.GenericWebHostService.StartAsync(CancellationToken cancellationToken)
       at Microsoft.Extensions.Hosting.Internal.Host.StartAsync(CancellationToken cancellationToken)
       at Microsoft.Extensions.Hosting.HostingAbstractionsHostExtensions.RunAsync(IHost host, CancellationToken token)
       at Microsoft.Extensions.Hosting.HostingAbstractionsHostExtensions.RunAsync(IHost host, CancellationToken token)
       at Microsoft.Extensions.Hosting.HostingAbstractionsHostExtensions.Run(IHost host)
       at Microsoft.AspNetCore.Builder.WebApplication.Run(String url)
       at Program.<Main>$(String[] args) in D:\REPO\GptVisualRest\Test\Program.cs:line 25

生成的默认Dockerfile #

FROM mcr.microsoft.com/dotnet/aspnet:6.0 AS base
WORKDIR /app
EXPOSE 80
EXPOSE 443

FROM mcr.microsoft.com/dotnet/sdk:6.0 AS build
WORKDIR /src
COPY ["WebApplication1.csproj", "."]
RUN dotnet restore "./WebApplication1.csproj"
COPY . .
WORKDIR "/src/."
RUN dotnet build "WebApplication1.csproj" -c Release -o /app/build

FROM build AS publish
RUN dotnet publish "WebApplication1.csproj" -c Release -o /app/publish /p:UseAppHost=false

FROM base AS final
WORKDIR /app
COPY --from=publish /app/publish .
ENTRYPOINT ["dotnet", "WebApplication1.dll"]

解决方法 #

1. 修改应用监听端口 #

通过环境变量或代码指定应用监听的端口，避开被占用的443：

• 容器启动时指定：添加环境变量参数，比如只启用HTTP：

  docker run -d -p 80:80 -e ASPNETCORE_URLS="http://+:80" <镜像名>
  

  或者改用其他HTTPS端口：

  docker run -d -p 80:80 -p 4430:4430 -e ASPNETCORE_URLS="http://+:80;https://+:4430" <镜像名>
  

• 代码硬编码修改：在Program.cs中直接指定运行地址：

  var builder = WebApplication.CreateBuilder(args);
  // 保留原有服务配置代码
  var app = builder.Build();
  // 保留原有中间件配置代码
  app.Run("http://+:80");
  

2. 排查容器内端口占用 #

进入容器检查443端口被哪个进程占用，停止无关进程：

• 进入容器：

  docker exec -it <容器ID> bash
  

• 查看端口占用：

  netstat -tulpn
  

• 根据输出找到占用443的进程ID，执行kill <进程ID>停止该进程（确保进程非必要）

3. 调整Dockerfile配置 #

• 禁用HTTPS：在final阶段添加环境变量，强制应用只监听80端口：

  FROM base AS final
  WORKDIR /app
  ENV ASPNETCORE_URLS="http://+:80"
  ENV ASPNETCORE_ENVIRONMENT=Production
  COPY --from=publish /app/publish .
  ENTRYPOINT ["dotnet", "WebApplication1.dll"]
  

• 配置自定义HTTPS证书：如果需要HTTPS，在Dockerfile中添加证书相关环境变量，并复制证书到容器：

  FROM base AS final
  WORKDIR /app
  ENV ASPNETCORE_Kestrel__Certificates__Default__Path=/app/ssl/cert.pfx
  ENV ASPNETCORE_Kestrel__Certificates__Default__Password=yourcertpassword
  COPY --from=publish /app/publish .
  COPY ./ssl/cert.pfx /app/ssl/
  ENTRYPOINT ["dotnet", "WebApplication1.dll"]
  

4. 检查宿主机端口映射冲突 #

如果启动容器时用了-p 443:443映射端口，检查宿主机443端口是否被其他服务（如IIS、其他容器、VPN工具等）占用：

• 宿主机执行netstat -ano | findstr ":443"查看占用进程
• 改用其他端口映射，比如：

  docker run -d -p 80:80 -p 4430:443 <镜像名>
  

内容的提问来源于stack exchange，提问作者Евгений