Unable to access docker containers from host over macvlan network

user_5169291 0
Viewed 7823

In my Linux network I am unable to reach my docker containers from the host they are running on, over a dedicated macvlan network. All other connections from to this macvlan network are fine.

So basically the setup is:

DOCKER1       eth0  172.0.0.1 (default)
  |           eth1  10.0.0.1  (macvlan)
  CONTAINER1        10.0.0.11 (macvlan)

DOCKER2       eth0  172.0.0.2 (default)
  |           eth1  10.0.0.2  (macvlan)
  CONTAINER2        10.0.0.12 (macvlan)
  • Host DOCKER1 cannot reach CONTAINER1
  • Host DOCKER2 cannot reach CONTAINER2
  • Host DOCKER1 can reach DOCKER2
  • Host DOCKER1 can reach CONTAINER2
  • Host DOCKER2 can reach DOCKER1
  • Host DOCKER2 can reach CONTAINER1
  • All containers can reach each other
  • All other devices in the physical network can reach all
  • All can reach the gateway/internet

How can I make the host reach itss own containers over the macvlan network?

I need specific applications to interact over this network, so using docker exec won't solve my problem ;).

macvlan docker networking
2 Answers

You can do this by doing the following:

ip link add foobar link enp7s0 type macvlan mode bridge
ip addr add 192.168.9.252/32 dev foobar
ip link set foobar up
ip route add 192.168.9.228/32 dev foobar

Where:

enp7s0 - Name of your physical adapter

192.168.9.252/32 - Genuine new IP on your network

192.168.9.228/32 - IP of the container using macvlan

Please be aware that this will not survive reboots, so you will need to script it to run each reboot or use another method to make it persisten

user_65724270
Related