moby/libnetwork/drivers/macvlan
Rob Murray cd7240f6d9 Stop macvlan with no parent from using ext-dns
We document that an macvlan network with no parent interface is
equivalent to a '--internal' network. But, in this case, an macvlan
network was still configured with a gateway. So, DNS proxying would
be enabled in the internal resolver (and, if the host's resolver
was on a localhost address, requests to external resolvers from the
host's network namespace would succeed).

This change disables configuration of a gateway for a macvlan Endpoint
if no parent interface is specified.

(Note if a parent interface with no external network is supplied as
'-o parent=<dummy>', the gateway will still be set up. Documentation
will need to be updated to note that '--internal' should be used to
prevent DNS request forwarding in this case.)

Signed-off-by: Rob Murray <rob.murray@docker.com>
2024-04-10 08:51:00 +01:00
..
mvmanager libnetwork: move datastore Scope consts to libnetwork/scope 2023-07-28 21:56:48 +02:00
macvlan.go remove some remaining pre-go1.17 build-tags 2023-08-24 17:51:07 +02:00
macvlan_endpoint.go migrate to github.com/containerd/log v0.1.0 2023-10-11 17:52:23 +02:00
macvlan_joinleave.go Stop macvlan with no parent from using ext-dns 2024-04-10 08:51:00 +01:00
macvlan_network.go Stop macvlan with no parent from using ext-dns 2024-04-10 08:51:00 +01:00
macvlan_setup.go migrate to github.com/containerd/log v0.1.0 2023-10-11 17:52:23 +02:00
macvlan_setup_test.go remove some remaining pre-go1.17 build-tags 2023-08-24 17:51:07 +02:00
macvlan_state.go migrate to github.com/containerd/log v0.1.0 2023-10-11 17:52:23 +02:00
macvlan_store.go libnet: Replace DeleteAtomic in retry loops with DeleteIdempotent 2024-02-22 08:22:09 +01:00
macvlan_test.go remove some remaining pre-go1.17 build-tags 2023-08-24 17:51:07 +02:00