Docker Networks

The following drivers exist:

  • Default Bridge Network
  • User defined Networks
    • enable Docker DNS
  • The Host Network
    • share IP with Host, like a regular application
    • Run Wireguard directly on the Host with a container as
  • MACVLAN (Bridge Mode)
    • receive IP adresses similar to the HOST
    • generated MAC adress
    • like a VM on the same network stack
    • requires subnet, gateway and specifying your host NIC
    • no DHCP
    • requires specifying unused IP for each container
    • issue: sharing multiple mac adresses on one switch port (needs promiscious mode)
      • run on host: sudo ip link set enp0s3 promisc on
    • still uses docker internal DNS
  • MACVLAN (802.1q mode)
  • IPVLAN (Layer 2)
    • like MACVLAN but use MAC from Host
  • IPVLAN (Layer 3)
    • separate isolated Networks, L3 Links
    • networks with the same parent network can talk to each other
    • allows broadcast isolation
  • Overlay Network for Docker Swarm
  • None