awsvpc vs bridge vs host vs none
~10 min read
The four ECS task network modes and when each is the right (or only) choice.
awsvpc vs bridge vs host vs none is a Pro topic
Sign in, then upgrade to Pro or Power to unlock this topic and the full AWS curriculum.
Key points
- •awsvpc: one ENI per task, task-level security groups, required for Fargate
- •bridge: host-level Docker virtual network, host-level security groups only
- •host: best performance, but one task per port per instance
- •none: no external networking, used for isolated batch workloads