You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
|Specify the name of the virtual bridge to use. If the bridge interface does not exist on the host, it is created. The default value is `cni0`.
26
+
|The name of the CNI plugin to configure: `bridge`.
31
27
32
28
|`ipam`
33
29
|`object`
34
30
|The configuration object for the IPAM CNI plugin. The plugin manages IP address assignment for the attachment definition.
35
31
32
+
|`bridge`
33
+
|`string`
34
+
|Optional: Specify the name of the virtual bridge to use. If the bridge interface does not exist on the host, it is created. The default value is `cni0`.
35
+
36
36
|`ipMasq`
37
37
|`boolean`
38
-
|Set to `true` to enable IP masquerading for traffic that leaves the virtual network. The source IP address for all traffic is rewritten to the bridge's IP address. If the bridge does not have an IP address, this setting has no effect. The default value is `false`.
38
+
|Optional: Set to `true` to enable IP masquerading for traffic that leaves the virtual network. The source IP address for all traffic is rewritten to the bridge's IP address. If the bridge does not have an IP address, this setting has no effect. The default value is `false`.
39
39
40
40
|`isGateway`
41
41
|`boolean`
42
-
|Set to `true` to assign an IP address to the bridge. The default value is `false`.
42
+
|Optional: Set to `true` to assign an IP address to the bridge. The default value is `false`.
43
43
44
44
|`isDefaultGateway`
45
45
|`boolean`
46
-
|Set to `true` to configure the bridge as the default gateway for the virtual network. The default value is `false`. If `isDefaultGateway` is set to `true`, then `isGateway` is also set to `true` automatically.
46
+
|Optional: Set to `true` to configure the bridge as the default gateway for the virtual network. The default value is `false`. If `isDefaultGateway` is set to `true`, then `isGateway` is also set to `true` automatically.
47
47
48
48
|`forceAddress`
49
49
|`boolean`
50
-
|Set to `true` to allow assignment of a previously assigned IP address to the virtual bridge. When set to `false`, if an IPv4 address or an IPv6 address from overlapping subsets is assigned to the virtual bridge, an error occurs. The default value is `false`.
50
+
|Optional: Set to `true` to allow assignment of a previously assigned IP address to the virtual bridge. When set to `false`, if an IPv4 address or an IPv6 address from overlapping subsets is assigned to the virtual bridge, an error occurs. The default value is `false`.
51
51
52
52
|`hairpinMode`
53
53
|`boolean`
54
-
|Set to `true` to allow the virtual bridge to send an Ethernet frame back through the virtual port it was received on. This mode is also known as _reflective relay_. The default value is `false`.
54
+
|Optional: Set to `true` to allow the virtual bridge to send an Ethernet frame back through the virtual port it was received on. This mode is also known as _reflective relay_. The default value is `false`.
55
55
56
56
|`promiscMode`
57
57
|`boolean`
58
-
|Set to `true` to enable promiscuous mode on the bridge. The default value is `false`.
58
+
|Optional: Set to `true` to enable promiscuous mode on the bridge. The default value is `false`.
59
59
60
60
|`vlan`
61
61
|`string`
62
-
|Specify a virtual LAN (VLAN) tag as an integer value. By default, no VLAN tag is assigned.
62
+
|Optional: Specify a virtual LAN (VLAN) tag as an integer value. By default, no VLAN tag is assigned.
63
+
64
+
|`preserveDefaultVlan`
65
+
|`string`
66
+
|Optional: Indicates whether the default vlan must be preserved on the `veth` end connected to the bridge. Defaults to true.
67
+
68
+
|`vlanTrunk`
69
+
|`list`
70
+
|Optional: Assign a VLAN trunk tag. The default value is `none`.
63
71
64
72
|`mtu`
65
73
|`string`
66
-
|Set the maximum transmission unit (MTU) to the specified value. The default value is automatically set by the kernel.
74
+
|Optional: Set the maximum transmission unit (MTU) to the specified value. The default value is automatically set by the kernel.
67
75
76
+
|`enabledad`
77
+
|`boolean`
78
+
|Optional: Enables duplicate address detection for the container side `veth`. The default value is `false`.
79
+
80
+
|`macspoofchk`
81
+
|`boolean`
82
+
|Optional: Enables mac spoof check, limiting the traffic originating from the container to the mac address of the interface. The default value is `false`.
68
83
|====
69
84
85
+
[NOTE]
86
+
====
87
+
The VLAN parameter configures the VLAN tag on the host end of the `veth` and also enables the `vlan_filtering` feature on the bridge interface.
88
+
====
89
+
90
+
[NOTE]
91
+
====
92
+
To configure uplink for a L2 network you need to allow the vlan on the uplink interface by using the following command:
93
+
94
+
[source,terminal]
95
+
----
96
+
$ bridge vlan add vid VLAN_ID dev DEV
97
+
----
98
+
99
+
====
100
+
101
+
70
102
[id="nw-multus-bridge-config-example_{context}"]
71
103
== bridge configuration example
72
104
@@ -76,7 +108,7 @@ The following example configures an additional network named `bridge-net`:
The following object describes the configuration parameters for the IPVLAN CNI
12
-
plugin:
12
+
The following object describes the configuration parameters for the IPVLAN CNI plugin:
13
13
14
14
.IPVLAN CNI plugin JSON configuration object
15
15
[cols=".^2,.^2,.^6",options="header"]
@@ -28,26 +28,31 @@ plugin:
28
28
|`string`
29
29
|The name of the CNI plugin to configure: `ipvlan`.
30
30
31
+
|`ipam`
32
+
|`object`
33
+
|The configuration object for the IPAM CNI plugin. The plugin manages IP address assignment for the attachment definition. This is required unless the plugin is chained.
34
+
31
35
|`mode`
32
36
|`string`
33
-
|The operating mode for the virtual network. The value must be `l2`, `l3`, or `l3s`. The default value is `l2`.
37
+
|Optional: The operating mode for the virtual network. The value must be `l2`, `l3`, or `l3s`. The default value is `l2`.
34
38
35
39
|`master`
36
40
|`string`
37
-
|The Ethernet interface to associate with the network attachment. If a `master` is not specified, the interface for the default network route is used.
41
+
|Optional: The Ethernet interface to associate with the network attachment. If a `master` is not specified, the interface for the default network route is used.
38
42
39
43
|`mtu`
40
44
|`integer`
41
-
|Set the maximum transmission unit (MTU) to the specified value. The default value is automatically set by the kernel.
42
-
43
-
|`ipam`
44
-
|`object`
45
-
|The configuration object for the IPAM CNI plugin. The plugin manages IP address assignment for the attachment definition.
46
-
47
-
Do not specify `dhcp`. Configuring IPVLAN with DHCP is not supported because IPVLAN interfaces share the MAC address with the host interface.
45
+
|Optional: Set the maximum transmission unit (MTU) to the specified value. The default value is automatically set by the kernel.
48
46
49
47
|====
50
48
49
+
[NOTE]
50
+
====
51
+
* The `ipvlan` object does not allow virtual interfaces to communicate with the `master` interface. Therefore the container will not be able to reach the host by using the `ipvlan` interface. Be sure that the container joins a network that provides connectivity to the host, such as a network supporting the Precision Time Protocol (`PTP`).
52
+
* A single `master` interface cannot simultaneously be configured to use both `macvlan` and `ipvlan`.
53
+
* For IP allocation schemes that cannot be interface agnostic, the `ipvlan` plugin can be chained with an earlier plugin that handles this logic. If the `master` is omitted, then the previous result must contain a single interface name for the `ipvlan` plugin to enslave. If `ipam` is omitted, then the previous result is used to configure the `ipvlan` interface.
54
+
====
55
+
51
56
[id="nw-multus-ipvlan-config-example_{context}"]
52
57
== ipvlan configuration example
53
58
@@ -57,7 +62,7 @@ The following example configures an additional network named `ipvlan-net`:
The following object describes the configuration parameters for the macvlan CNI
9
-
plugin:
8
+
The following object describes the configuration parameters for the macvlan CNI plugin:
10
9
11
10
.MACVLAN CNI plugin JSON configuration object
12
11
[cols=".^2,.^2,.^6",options="header"]
@@ -25,21 +24,21 @@ plugin:
25
24
|`string`
26
25
|The name of the CNI plugin to configure: `macvlan`.
27
26
27
+
|`ipam`
28
+
|`object`
29
+
|The configuration object for the IPAM CNI plugin. The plugin manages IP address assignment for the attachment definition.
30
+
28
31
|`mode`
29
32
|`string`
30
-
|Configures traffic visibility on the virtual network. Must be either `bridge`, `passthru`, `private`, or `vepa`. If a value is not provided, the default value is `bridge`.
33
+
|Optional: Configures traffic visibility on the virtual network. Must be either `bridge`, `passthru`, `private`, or `vepa`. If a value is not provided, the default value is `bridge`.
31
34
32
35
|`master`
33
36
|`string`
34
-
|The host network interface, such as a network interface, bond, or bond with VLAN, to associate with the newly created macvlan interface. If a value is not specified, then the default route interface is used.
37
+
|Optional: The host network interface to associate with the newly created macvlan interface. If a value is not specified, then the default route interface is used.
35
38
36
39
|`mtu`
37
40
|`string`
38
-
|The maximum transmission unit (MTU) to the specified value. The default value is automatically set by the kernel.
39
-
40
-
|`ipam`
41
-
|`object`
42
-
|The configuration object for the IPAM CNI plugin. The plugin manages IP address assignment for the attachment definition.
41
+
|Optional: The maximum transmission unit (MTU) to the specified value. The default value is automatically set by the kernel.
0 commit comments