Nordlynx with ipvlan network #177
bot-nuunuu
started this conversation in
General
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
I've been trying to set up nordlynx with an ipvlan type network to have it live on it's own IP, then route other containers on it's network so those containers show up as forwarded ports on the nordlynx IP, but so far I haven't had any luck. I have a machine with a trunked ethernet connection with 3 possible vlans and my goal is to have nordlynx only function on one of those. It seems like nordlynx expects to be in bridged mode though and if it's not it wont try and utilize the implicit or explicit ip given to that container. Basically, it ceases to make DNS calls if the DNS isn't part of the NET_LOCAL subnet, which is obviously not something anyone should do. That said, I also tried creating a bridge and specifying the host ipv4 as one that I gave my machine specifically for the target vlan, but if I bridge to that, nordlynx can actually communicate on any vlan that the host machine can, which is super not good. In addition, at least on unraid, I've seen that the nordlynx implementation can actually access the management gui of the host unraid machine without passing through the external firewall/router first if both the bridged ip and the unraid gui are both in the NET_LOCAL subnet, meaning the bridged approach could potentially have a huge security flaw for anyone running on unraid.
That said, I would really really like to have this running with it's own IP address over an IPVLAN network, does anyone know if this is possible? There's no documentation on it and the implementation seems to just fall apart when selecting anything other than a bridge...
Beta Was this translation helpful? Give feedback.
All reactions