Firewall rules are correct for this.  The only way I can connect to docker from my vm is by passing through the nic.  I can not by using macvlan and a vlan br0.2 connect.  From what I can tell it has something to do with macvlan.  For now it's working due to NIC pass through but I'd like to eliminate the need for this.  is this something I can fix or is it by design or is it a known bug?

What interface is used for the VM?

 

It surely is possible to let VMs talk to containers on a macvlan network.

br0.9 In this case and the dockers are on br0.  only thing goofy with this network is the default vlan untagged is forced to 10 for the port so the server gets the .10 range.  the vm is .90 range.  it all functions with hardware passed through so the rules should be fine.

Edited January 21, 20206 yr by SRPick

25 minutes ago, SRPick said:

only thing goofy with this network is the default vlan untagged is forced to 10 for the port so the server gets the .10 range.  the vm is .90 range

This isn't really clear to me, what you have set up

Care to explain more?

 

When using VLANs, these are isolated networks and your router must be set up to make the connectivity to these networks.

 

11 minutes ago, bonienl said:

This isn't really clear to me, what you have set up

Care to explain more?

 

When using VLANs, these are isolated networks and your router must be set up to make the connectivity to these networks.

 

Ok, so I'm at a pc now so I can type everything out.  So this setup has worked before on my other server(hyper-v with ubuntu vms) using the same ip addresses and it currently works by using the nic pass through.  The only difference is that my VLAN1 is no longer the default vlan for the port it is now VLAN10 so the unraid server is assigned an ip on VLAN10.  This port is setup as a trunk and my firewall rules in unifi allows for communication between these specific ips and it works while nic passthrough is enable (I have verified the ips are the same using ifconfig and checking unifi controller).

 

Docker is run on host which is now forced to VLAN10.  It is using a single SFP+ port run into it with trunking enabled.  My dockers are set to "Bridge", br0.20 with an assigned ip and br0.90 with an assigned ip.

 

VM currently works with hardware passthrough.  When not on HW pass through It was run on br0.90 and can not connect to any of the dockers even the one on br0.90.

Edited January 21, 20206 yr by SRPick