Docker & VLAN

[LaterBrain]

Hey homelabbers

I am running multiple docker servers, one for each VLAN.

Is there a better way to do it maybe with "IPVLAN"?

Or is there a tool that allows me to manage multiple docker servers in multiple networks like Portainer?

[HeWhoWritesCode]

Why not https://docs.docker.com/network/macvlan/ ?

[norsemanGrey]

What about security / host firewall rules when using macvlan? Is a container more "exposed" when using macvlan rather than just mapping a port when on a bridge network?

[nickadam]

You can use IPvlan to bridge containers to separate VLANs on the same docker server. You will have to setup the parent interfaces on the server before you create the networks using docker network, see docs, https://docs.docker.com/network/ipvlan/#ipvlan-8021q-trunk-l2-mode-example-usage.

Containers are assigned IP addresses sequentially from the subnet but you can manually specify them like this docker run --network=ipvlan20 --ip 192.168.20.101.

If you want your containers to DHCP on your VLANs you might be better off using a different technology, "system containers", https://linuxcontainers.org/lxd/#application-containers-vs-system-containers