Skip to content
This repository has been archived by the owner on Jan 11, 2021. It is now read-only.

An option to disable masquerading #3

Closed
orivej opened this issue Aug 20, 2015 · 0 comments
Closed

An option to disable masquerading #3

orivej opened this issue Aug 20, 2015 · 0 comments

Comments

@orivej
Copy link

orivej commented Aug 20, 2015

There is a host that has a set of unused globally routable IPv6 addresses to assign to eth1 or its slaves, and the setup that works is to bring eth1 up without any IP address, let ipvlan-docker-plugin create ipvlan slaves for Docker containers and assign them addresses from the available set of addresses.

In the output of ipvlan-docker-plugin --gateway fe80::1 --ipvlan-subnet …::e2a0/124 -d there is a warning:

INFO[0000] IPVlan network driver initialized successfully
DEBU[0041] Handshake completed
DEBU[0041] /sbin/iptables, [--wait -C POSTROUTING -t nat -s …::e2a0/124 -j MASQUERADE]
DEBU[0041] /sbin/iptables, [--wait -I POSTROUTING -t nat -s …::e2a0/124 -j MASQUERADE]
WARN[0041] error setting up outboud nat: iptables failed: iptables --wait -I POSTROUTING -t nat -s …::e2a0/124 -j MASQUERADE: iptables v1.4.21: invalid mask `124' specified
Try `iptables -h' or 'iptables --help' for more information.
 (exit status 2) 

which indicates that containers would not be routable from the outside if ipvlan-docker-plugin succeded in enabling masquerading.

@orivej orivej mentioned this issue Aug 20, 2015
nerdalert added a commit that referenced this issue Sep 23, 2015
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants