參考https://www.cnblogs.com/CloudMan6/p/7383919.html macvlan不依賴linux?bridge brctl?show?可以確認沒有創建新的bridge 查看容器中只有一塊網卡 eth0@if3 ，對應host上的 3號接口 容器的interface?直接與host的網卡連接，這種方法使得容器無需通過NAT和端口映射就能與外網直接通信（只要網絡中有網關），在網絡上與其他獨立的主機沒有區別 root@host1:~# brctl show bridge name????bridge id????????STP enabled????interfaces docker0????????8000.0242a29df713????no???????? root@host1:~# docker exec bbox1 ip link 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue qlen 1 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 6: eth0@if3: <BROADCAST,MULTICAST,UP,LOWER_UP,M-DOWN> mtu 1500 qdisc noqueue link/ether 02:42:ac:10:56:0b brd ff:ff:ff:ff:ff:ff root@host1:~# ip link 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 2: ens160: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000 link/ether 00:50:56:87:4c:70 brd ff:ff:ff:ff:ff:ff 3: ens192: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000 link/ether 00:50:56:87:22:32 brd ff:ff:ff:ff:ff:ff 5: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN mode DEFAULT group default link/ether 02:42:a2:9d:f7:13 brd ff:ff:ff:ff:ff:ff 用?sub-interface實現多macvlan網絡 macvlan會獨占主機的網卡，也就是說一個網卡只能創建一個macvlan網絡，否則會報錯 root@host1:~# docker network create -d macvlan --subnet 172.16.87.0/24 --gateway 172.16.87.1 -o parent=ens192 mac_net2 Error response from daemon: network dm-d60df792c936 is already using parent interface ens192 但是主機的網卡數量是有限的，如何支持更多的macvlan網絡呢？ 好在macvlan不僅可以連接到?interface （ens192），還可以連接到?sub-interface （ens192.xxx） VLAN是現代網絡常用的網絡虛擬化技術，他可以將物理的二層網絡劃分成多達4094個邏輯網絡，這些邏輯網絡在二層上是相互隔離的，每個邏輯網絡（即VLAN）由?VLAN?ID?區分，VLAN?ID?的取值 1 - 4094 Linux的網卡也能支持VLAN（apt-get?install?vlan），同一個interface可以收發多個VLAN的數據包，不過前提是要創建VLAN的sub-interface 比如希望ens192?同時支持vlan10?和vlan20，則需創建sub-interface ens192.10?和?ens192.20 在交換機上，如果某個port只能收發單個VLAN的數據，該port為Access模式。如果支持多VLAN，則為Trunk模式 root@host1:~# apt-get install vlan Reading package lists... Done Building dependency tree??????? Reading state information... Done The following packages will be upgraded: vlan 1 upgraded, 0 newly installed, 0 to remove and 125 not upgraded. Need to get 30.7 kB of archives. After this operation, 45.1 kB disk space will be freed. Get:1 http://mirrors.aliyun.com/ubuntu xenial-updates/main amd64 vlan amd64 1.9-3.2ubuntu1.16.04.5 [30.7 kB] Fetched 30.7 kB in 5s (5,469 B/s)???? (Reading database ... 60147 files and directories currently installed.) Preparing to unpack .../vlan_1.9-3.2ubuntu1.16.04.5_amd64.deb ... Unpacking vlan (1.9-3.2ubuntu1.16.04.5) over (1.9-3.2ubuntu1) ... Processing triggers for man-db (2.7.5-1) ... Setting up vlan (1.9-3.2ubuntu1.16.04.5) ... Installing new version of config file /etc/network/if-pre-up.d/vlan ... Installing new version of config file /etc/network/if-up.d/ip ... ? root@host1:~# cat /etc/network/interfaces # This file describes the network interfaces available on your system # and how to activate them. For more information, see interfaces(5). source /etc/network/interfaces.d/* # The loopback network interface auto lo iface lo inet loopback # The primary network interface auto ens160 iface ens160 inet static address 10.12.31.211 netmask 255.255.252.0 network 10.12.28.0 broadcast 10.12.31.255 gateway 10.12.28.6 # dns-* options are implemented by the resolvconf package, if installed dns-nameservers 10.12.28.6 up route add -net 172.22.0.0 netmask 255.255.0.0 gw 10.12.28.1 ens160 auto ens192 iface ens192 inet manual auto ens192.10 iface ens192.10 inet manual vlan-raw-device ens192 auto ens192.20 iface ens192.20 inet manual vlan-raw-device ens192 root@host1:~# ifup ens192.10 WARNING:??Could not open /proc/net/vlan/config.??Maybe you need to load the 8021q module, or maybe you are not using PROCFS?? Set name-type for VLAN subsystem. Should be visible in /proc/net/vlan/config Added VLAN with VID == 10 to IF -:ens192:- ifquery: recursion detected for interface ens192 in parent-lock phase ifquery: recursion detected for parent interface ens192 in parent-lock phase ifquery: recursion detected for parent interface ens192 in parent-lock phase root@host1:~# ifup ens192.20 Set name-type for VLAN subsystem. Should be visible in /proc/net/vlan/config Added VLAN with VID == 20 to IF -:ens192:- ifquery: recursion detected for interface ens192 in parent-lock phase ifquery: recursion detected for parent interface ens192 in parent-lock phase ifquery: recursion detected for parent interface ens192 in parent-lock phase root@host1:~# cat /proc/net/vlan/config VLAN Dev name?????| VLAN ID Name-Type: VLAN_NAME_TYPE_RAW_PLUS_VID_NO_PAD ens192.10??????| 10??| ens192 ens192.20??????| 20??| ens192 root@host1:~# ip link 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 2: ens160: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000 link/ether 00:50:56:87:4c:70 brd ff:ff:ff:ff:ff:ff 3: ens192: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000 link/ether 00:50:56:87:22:32 brd ff:ff:ff:ff:ff:ff 5: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN mode DEFAULT group default link/ether 02:42:a2:9d:f7:13 brd ff:ff:ff:ff:ff:ff 7: ens192.10@ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000 link/ether 00:50:56:87:22:32 brd ff:ff:ff:ff:ff:ff 8: ens192.20@ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000 link/ether 00:50:56:87:22:32 brd ff:ff:ff:ff:ff:ff root@host1:~# docker network create -d macvlan --subnet 172.16.10.0/24 --gateway 172.16.10.1 -o parent=ens192.10 mac_net10 884e50ddfb92c2454b4e597e6beeaf1f1f2d4f6196314d900f20c40f0d0a0c78 root@host1:~# docker network create -d macvlan --subnet 172.16.20.0/24 --gateway 172.16.20.1 -o parent=ens192.20 mac_net20 c402380a197da23fa5537fa3a36b5a82fcf30d3b999a48bda4fe82b69861b6dd root@host1:~# docker network ls NETWORK ID??????????NAME????????????????DRIVER??????????????SCOPE 9e26e05efc49????????bridge??????????????bridge??????????????local bb03f7574aa2????????host????????????????host????????????????local d60df792c936????????mac_net1????????????macvlan?????????????local 884e50ddfb92????????mac_net10???????????macvlan?????????????local c402380a197d????????mac_net20???????????macvlan?????????????local 11e39328a6d1????????none????????????????null????????????????local root@host1:~# docker run -itd --name bbox_10_1 --ip 172.16.10.101 --network mac_net10 busybox 3cbcdbce63eb19024ca436fea761a4e6e154a6e7cbe26b9d6c50767dcb783026 root@host1:~# docker run -itd --name bbox_20_1 --ip 172.16.20.201 --network mac_net20 busybox a9b648d4599a58efc64ad29db5dc484713d80803642e26910e09fcfefa54fab7 root@host1:~# docker exec bbox_10_1 ip link 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue qlen 1 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 9: eth0@if7: <BROADCAST,MULTICAST,UP,LOWER_UP,M-DOWN> mtu 1500 qdisc noqueue link/ether 02:42:ac:10:0a:65 brd ff:ff:ff:ff:ff:ff root@host1:~# docker exec bbox_20_1 ip link 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue qlen 1 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 10: eth0@if8: <BROADCAST,MULTICAST,UP,LOWER_UP,M-DOWN> mtu 1500 qdisc noqueue link/ether 02:42:ac:10:14:c9 brd ff:ff:ff:ff:ff:ff 在host2?上做同樣的操作 root@host2:~# apt-get install vlan Reading package lists... Done Building dependency tree??????? Reading state information... Done The following packages will be upgraded: vlan 1 upgraded, 0 newly installed, 0 to remove and 125 not upgraded. Need to get 30.7 kB of archives. After this operation, 45.1 kB disk space will be freed. Get:1 http://mirrors.aliyun.com/ubuntu xenial-updates/main amd64 vlan amd64 1.9-3.2ubuntu1.16.04.5 [30.7 kB] Fetched 30.7 kB in 0s (393 kB/s) (Reading database ... 60147 files and directories currently installed.) Preparing to unpack .../vlan_1.9-3.2ubuntu1.16.04.5_amd64.deb ... Unpacking vlan (1.9-3.2ubuntu1.16.04.5) over (1.9-3.2ubuntu1) ... Processing triggers for man-db (2.7.5-1) ... Setting up vlan (1.9-3.2ubuntu1.16.04.5) ... Installing new version of config file /etc/network/if-pre-up.d/vlan ... Installing new version of config file /etc/network/if-up.d/ip ... root@host2:~# apt-get install vlan Reading package lists... Done Building dependency tree??????? Reading state information... Done vlan is already the newest version (1.9-3.2ubuntu1.16.04.5). 0 upgraded, 0 newly installed, 0 to remove and 125 not upgraded. root@host2:~# vim /etc/network/interfaces root@host2:~# cat /etc/network/interfaces # This file describes the network interfaces available on your system # and how to activate them. For more information, see interfaces(5). source /etc/network/interfaces.d/* # The loopback network interface auto lo iface lo inet loopback # The primary network interface auto ens160 iface ens160 inet static address 10.12.31.212 netmask 255.255.252.0 network 10.12.28.0 broadcast 10.12.31.255 gateway 10.12.28.6 # dns-* options are implemented by the resolvconf package, if installed dns-nameservers 10.12.28.6 up route add -net 172.22.0.0 netmask 255.255.0.0 gw 10.12.28.1 ens160 uto ens192 iface ens192 inet manual auto ens192.10 iface ens192.10 inet manual vlan-raw-device ens192 auto ens192.20 iface ens192.20 inet manual vlan-raw-device ens192 root@host2:~# ifup ens192.10 WARNING:??Could not open /proc/net/vlan/config.??Maybe you need to load the 8021q module, or maybe you are not using PROCFS?? Set name-type for VLAN subsystem. Should be visible in /proc/net/vlan/config Added VLAN with VID == 10 to IF -:ens192:- ifquery: recursion detected for parent interface ens192 in parent-lock phase ifquery: recursion detected for parent interface ens192 in parent-lock phase root@host2:~# ifup ens192.20 Set name-type for VLAN subsystem. Should be visible in /proc/net/vlan/config Added VLAN with VID == 20 to IF -:ens192:- ifquery: recursion detected for parent interface ens192 in parent-lock phase ifquery: recursion detected for parent interface ens192 in parent-lock phase root@host2:~# cat /proc/net/vlan/config VLAN Dev name?????| VLAN ID Name-Type: VLAN_NAME_TYPE_RAW_PLUS_VID_NO_PAD ens192.10??????| 10??| ens192 ens192.20??????| 20??| ens192 root@host2:~# ip link 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 2: ens160: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000 link/ether 00:50:56:87:13:59 brd ff:ff:ff:ff:ff:ff 3: ens192: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000 link/ether 00:50:56:87:1b:c0 brd ff:ff:ff:ff:ff:ff 4: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN mode DEFAULT group default link/ether 02:42:6c:e4:0d:c1 brd ff:ff:ff:ff:ff:ff 8: ens192.10@ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000 link/ether 00:50:56:87:1b:c0 brd ff:ff:ff:ff:ff:ff 9: ens192.20@ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000 link/ether 00:50:56:87:1b:c0 brd ff:ff:ff:ff:ff:ff root@host2:~# docker network create -d macvlan --subnet 172.16.10.0/24 --gateway 172.16.10.1 -o parent=ens192.10 mac_net10 a90d23d941a9e16332546375cb6b4c00ca3002315bb808a27c683b30ca6b46b0 root@host2:~# docker network create -d macvlan --subnet 172.16.20.0/24 --gateway 172.16.20.1 -o parent=ens192.20 mac_net20 d7312840540387493e70f3d9eb3c136f8e76f51ccc4af9b9913fb2e8765b8f98 root@host2:~# docker network ls NETWORK ID??????????NAME????????????????DRIVER??????????????SCOPE 65563241b1ff????????bridge??????????????bridge??????????????local cf4c89650a1f????????host????????????????host????????????????local 39f1aab9f5b8????????mac_net1????????????macvlan?????????????local a90d23d941a9????????mac_net10???????????macvlan?????????????local d73128405403????????mac_net20???????????macvlan?????????????local 2f7d79e0114d????????none????????????????null????????????????local root@host2:~# docker run -itd --name bbox_10_2 --ip 172.16.10.102 --network mac_net10 busybox 97be9c3ca95c3a68852bb6f20b04f6b603903140f8b24c56ce7def4dc49d672e root@host2:~# docker run -itd --name bbox_20_2 --ip 172.16.20.202 --network mac_net20 busybox 652af91246d04263826933ba8e2334c363863ea263b6289b934d15b5193c89ef root@host2:~# docker exec bbox_10_2 ip link 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue qlen 1 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 10: eth0@if8: <BROADCAST,MULTICAST,UP,LOWER_UP,M-DOWN> mtu 1500 qdisc noqueue link/ether 02:42:ac:10:0a:66 brd ff:ff:ff:ff:ff:ff root@host2:~# docker exec bbox_20_2 ip link 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue qlen 1 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 11: eth0@if9: <BROADCAST,MULTICAST,UP,LOWER_UP,M-DOWN> mtu 1500 qdisc noqueue link/ether 02:42:ac:10:14:ca brd ff:ff:ff:ff:ff:ff 以上操作完畢后，兩個host上的容器網絡配置如下 root@host1:~# docker exec bbox_10_1 ip r default via 172.16.10.1 dev eth0 172.16.10.0/24 dev eth0 scope link??src 172.16.10.101 root@host1:~# docker exec bbox_20_1 ip r default via 172.16.20.1 dev eth0 172.16.20.0/24 dev eth0 scope link??src 172.16.20.201 root@host2:~# docker exec bbox_10_2 ip r default via 172.16.10.1 dev eth0 172.16.10.0/24 dev eth0 scope link??src172.16.10.102 root@host2:~# docker exec bbox_20_2 ip r default via 172.16.20.1 dev eth0 172.16.20.0/24 dev eth0 scope link??src 172.16.20.202 最后需要注意vmware網絡? 需要配置vlan?id?全部（4095）

轉載于:https://www.cnblogs.com/www1707/p/10625050.html

與50位技術專家面對面20年技術見證，附贈技術全景圖

總結

以上是生活随笔為你收集整理的056、macvlan网络结构分析（2019-03-25 周一）的全部內容，希望文章能夠幫你解決所遇到的問題。

如果覺得生活随笔網站內容還不錯，歡迎將生活随笔推薦給好友。