July 13, 20223 yr I've been trying for a few days now to isolate my docker containers into groups on different VLANs so that I don't have a bunch of security cameras, monitoring dockers, home automation, etc. all on my main LAN. However, but have ran into a number of problems. Dockers with br1:VLAN networks will not grab an IP address from the Pfsense DHCP server I can manually assign IPs, and would likely do so for most Dockers. However, this is a bit annoying... Dockers with br1:VLAN networks with Fixed IP addresses do not show up in Pfsense DHCP leases (though I can see the IPs traffic) This isn't a huge problem right now, but it does make managing static IP assignments more difficult. Dockers with br1:VLAN networks can be pinged by devices outside of Unraid, but can not ping to devices outside of unraid This isn't causing me a problem right now, but might shed some light on what exactly is going on. Dockers with br1:VLAN networks will attempt to use the br0:LAN's default gateway to resolve DNS This prevents VLAN dockers from accessing the internet My setup is as follows: Pfsense box with the following VLANs: LAN: Access to all VLANs IOT: Access to internet, but not other VLANs Security: No access to internet or other VLANs Guest: Access to internet, but not other VLANs Unifi managed switch and AP. The port connected to Unraid is a trunk port with all tagged VLANs Unraid box br0: Currently configured to be LAN, with the static IP of the server for SMB/management br1: No IP address, but all VLANs added with no IP address assignment Thanks for any help! Let me know if there is any additional information I can provide.
July 14, 20223 yr 5 hours ago, mtfinny said: Dockers with br1:VLAN networks will not grab an IP address from the Pfsense DHCP server I can manually assign IPs, and would likely do so for most Dockers. However, this is a bit annoying... This normal, docker won't get IP from your DHCP, in docker setting page, you can enable DHCP but the aim seems to be control IP range only to avoid conflict with your DHCP. 5 hours ago, mtfinny said: Dockers with br1:VLAN networks with Fixed IP addresses do not show up in Pfsense DHCP leases (though I can see the IPs traffic) This isn't a huge problem right now, but it does make managing static IP assignments more difficult. When docker access internet or other subnet, you will see the traffic. 5 hours ago, mtfinny said: Dockers with br1:VLAN networks can be pinged by devices outside of Unraid, but can not ping to devices outside of unraid This isn't causing me a problem right now, but might shed some light on what exactly is going on. Both way pingable, you should review VLAN network / Pfsense setting. 5 hours ago, mtfinny said: Dockers with br1:VLAN networks will attempt to use the br0:LAN's default gateway to resolve DNS This prevents VLAN dockers from accessing the internet Unraid's DNS setting is use for all interface, for docker use other DNS or not, will depends on docker itself.
July 15, 20223 yr Author On 7/13/2022 at 9:19 PM, Vr2Io said: Unraid's DNS setting is use for all interface, for docker use other DNS or not, will depends on docker itself. Can you expand on this? I don't understand why a docker using br1.<VLAN x> would use the br0 gateway for DNS when in the Docker settings the br1.<VLAN x>'s gateway is defined. This is especially confusing because I configured br1 to not have an IP address or default gateway defined.
July 15, 20223 yr 5 hours ago, mtfinny said: Can you expand on this ? I mean Docker app can hardcode use any public DNS instead Unraid DNS setting. 5 hours ago, mtfinny said: I configured br1 to not have an IP address or default gateway defined. Sorry, I also confuse about this.
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.