Skip to content

MacVLAN Documentation no longer has notes about the container/host restriction #22607

Open
@Chlorus

Description

@Chlorus

Is this a docs issue?

  • My issue is about the documentation content or website

Type of issue

I can't find what I'm looking for

Description

I was having issues pinging my Docker host from a container attached via macvlan; this is an inherent limitation of macvlan & requires some workarounds. Apparently this was noted at some point on the macvlan documentation page, but it was removed - it would have been nice to have been aware of this limitation from the outset.

Location

https://docs.docker.com/engine/network/drivers/macvlan/

Suggestion

Restore the following text to the macvlan overview page, or describe workarounds to the issue:

When using macvlan, you cannot ping or communicate with the default namespace IP address. For example, if you create a container and try to ping the Docker host’s eth0, it will not work. That traffic is explicitly filtered by the kernel modules themselves to offer additional provider isolation and security.
A macvlan subinterface can be added to the Docker host, to allow traffic between the Docker host and containers. The IP address needs to be set on this subinterface and removed from the parent address.

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions