moby/integration/network/macvlan
Rob Murray cd7240f6d9 Stop macvlan with no parent from using ext-dns
We document that an macvlan network with no parent interface is
equivalent to a '--internal' network. But, in this case, an macvlan
network was still configured with a gateway. So, DNS proxying would
be enabled in the internal resolver (and, if the host's resolver
was on a localhost address, requests to external resolvers from the
host's network namespace would succeed).

This change disables configuration of a gateway for a macvlan Endpoint
if no parent interface is specified.

(Note if a parent interface with no external network is supplied as
'-o parent=<dummy>', the gateway will still be set up. Documentation
will need to be updated to note that '--internal' should be used to
prevent DNS request forwarding in this case.)

Signed-off-by: Rob Murray <rob.murray@docker.com>
2024-04-10 08:51:00 +01:00
..
macvlan_test.go Stop macvlan with no parent from using ext-dns 2024-04-10 08:51:00 +01:00
main_test.go Don't run tests twice 2023-09-19 11:37:55 +02:00
main_windows_test.go Integration: MACVlan add missing import comment and build-tag 2019-07-13 13:35:21 +02:00