mirror of
https://github.com/moby/moby.git
synced 2022-11-09 12:21:53 -05:00
10027e8c01
Introduce "com.docker.network.bridge.inhibit_ipv4" option to the bridge network driver. If set, this option will prevent docker from setting or modifying Layer-3 (IP) configuration on the bridge interface in any way. This option should allow connecting containers to pre-existing network segments (with e.g., pre-existing default gateways) while simultaneously preserving our ability to communicate with the host and/or configure the properties of the host-side container virtual network interface (e.g., delay/loss/jitter via netem), which can not be done using macvlan. Signed-off-by: Gabriel Somlo <gsomlo@gmail.com>
82 lines
2.3 KiB
Go
82 lines
2.3 KiB
Go
package bridge
|
|
|
|
import (
|
|
"errors"
|
|
"fmt"
|
|
"io/ioutil"
|
|
"net"
|
|
"path/filepath"
|
|
|
|
"github.com/docker/libnetwork/types"
|
|
"github.com/sirupsen/logrus"
|
|
"github.com/vishvananda/netlink"
|
|
)
|
|
|
|
func selectIPv4Address(addresses []netlink.Addr, selector *net.IPNet) (netlink.Addr, error) {
|
|
if len(addresses) == 0 {
|
|
return netlink.Addr{}, errors.New("unable to select an address as the address pool is empty")
|
|
}
|
|
if selector != nil {
|
|
for _, addr := range addresses {
|
|
if selector.Contains(addr.IP) {
|
|
return addr, nil
|
|
}
|
|
}
|
|
}
|
|
return addresses[0], nil
|
|
}
|
|
|
|
func setupBridgeIPv4(config *networkConfiguration, i *bridgeInterface) error {
|
|
if !config.InhibitIPv4 {
|
|
addrv4List, _, err := i.addresses()
|
|
if err != nil {
|
|
return fmt.Errorf("failed to retrieve bridge interface addresses: %v", err)
|
|
}
|
|
|
|
addrv4, _ := selectIPv4Address(addrv4List, config.AddressIPv4)
|
|
|
|
if !types.CompareIPNet(addrv4.IPNet, config.AddressIPv4) {
|
|
if addrv4.IPNet != nil {
|
|
if err := i.nlh.AddrDel(i.Link, &addrv4); err != nil {
|
|
return fmt.Errorf("failed to remove current ip address from bridge: %v", err)
|
|
}
|
|
}
|
|
logrus.Debugf("Assigning address to bridge interface %s: %s", config.BridgeName, config.AddressIPv4)
|
|
if err := i.nlh.AddrAdd(i.Link, &netlink.Addr{IPNet: config.AddressIPv4}); err != nil {
|
|
return &IPv4AddrAddError{IP: config.AddressIPv4, Err: err}
|
|
}
|
|
}
|
|
}
|
|
|
|
// Store bridge network and default gateway
|
|
i.bridgeIPv4 = config.AddressIPv4
|
|
i.gatewayIPv4 = config.AddressIPv4.IP
|
|
|
|
return nil
|
|
}
|
|
|
|
func setupGatewayIPv4(config *networkConfiguration, i *bridgeInterface) error {
|
|
if !i.bridgeIPv4.Contains(config.DefaultGatewayIPv4) {
|
|
return &ErrInvalidGateway{}
|
|
}
|
|
|
|
// Store requested default gateway
|
|
i.gatewayIPv4 = config.DefaultGatewayIPv4
|
|
|
|
return nil
|
|
}
|
|
|
|
func setupLoopbackAddressesRouting(config *networkConfiguration, i *bridgeInterface) error {
|
|
sysPath := filepath.Join("/proc/sys/net/ipv4/conf", config.BridgeName, "route_localnet")
|
|
ipv4LoRoutingData, err := ioutil.ReadFile(sysPath)
|
|
if err != nil {
|
|
return fmt.Errorf("Cannot read IPv4 local routing setup: %v", err)
|
|
}
|
|
// Enable loopback addresses routing only if it isn't already enabled
|
|
if ipv4LoRoutingData[0] != '1' {
|
|
if err := ioutil.WriteFile(sysPath, []byte{'1', '\n'}, 0644); err != nil {
|
|
return fmt.Errorf("Unable to enable local routing for hairpin mode: %v", err)
|
|
}
|
|
}
|
|
return nil
|
|
}
|