Synology Docker network how to bridge Docker container to local network with macvlan network

Docker network how to bridge Docker container to a local network with macvlan network

MacVlan network, this will allow the containers to get a dedicated IP on the local network. This will solve:

• no port clashes with Synology NAS as all ports will run only on dedicated IP.
• Client IP's visible as we are part of the real network.
• The container has its own IP we can reach -> almost like a VM but still a container

Few items you need for this.

• You need to install Docker from the Package Center.
• You need to enable "Open vSwitch"
• You need to know the ovs switch name of your network interface.
• You need to know the gateway IP.
• You need to know the network class.
• You need assig IP or block for the container.
• you need assig the name for the new macvlan network interface.

1. Enable Open vSwitch

Under Control panel > Network > Network interface > Select LAN interface then click Manage, check Enable Open vSwitch then click OK.

2. Find ovs switch name, gateway, and network classes.  

Login SSH as root, and identify the ovs switch name use the following command.

ip route |grep default

ash-4.3# ip route |grep default

default via 192.168.1.1 dev ovs_eth0  src 192.168.1.100

In my caseovs_eth0 is switch name that I will use. the gateway IP is 192.168.1.1 and the network class 192.168.1.0/24.  I want to reserve IP 192.168.1.17-30 for my Docker containers.

https://www.calculator.net/ip-subnet-calculator.html?cclass=c&csubnet=28&cip=192.168.1.16&ctype=ipv4&printit=0&x=73&y=26

192.168.1.16/28 

3. Create macvlan interface

In my case the command looks like this, to create the Bridge2LAN network interface and available IPs 192.168.17-30

docker network create --driver=macvlan --gateway=192.168.1.1 --subnet=192.168.1.0/24 --ip-range=192.168.1.16/28 -o parent=ovs_eth0 Bridge2LAN

Next time when you create a new container just select the Bridge2LAN network and you will receive a local IP.

Exp.

Your network segment 192.168.1.X and your firewall 192.168.1.1 the parent interface is ovs_eth0. 

You want to create the new macvlan interface name Bridge2LAN and Docker containers can use IP from 192.168.1.2 - 254

 

docker network create --driver=macvlan --gateway=192.168.1.1 --subnet=192.168.1.0/24 --ip-range=192.168.1.1/24 -o parent=ovs_eth0 Bridge2LAN