[lxc-users] Bind public IP that is available on host's ens3:1 to a specific LXD container?

[Fajar A. Nugraha]

On Sat, May 20, 2017 at 10:31 AM, Thomas Ward <teward at ubuntu.com> wrote:

> I've been able to switch this to a bridged method, with the
>
host interfaces set to 'manual', an inet0 bridge created that is static
> IP'd for the host system to have its primary IP, and can have manual IP
> assignments to containers on that bridged network for the other
> non-primary IPs.



For sake of completeness:
- converting eth0 to be a slave is the "standard" approach:
https://help.ubuntu.com/lts/serverguide/lxc.html#lxc-network
https://help.ubuntu.com/lts/serverguide/network-configuration.html#bridging

- an easier approach is to use macvlan. Especially if the host doesn't need
to communicate directly with the container (which should also be what
happens in your case, as it appears the host on the containers are on
different subnet)
https://github.com/lxc/lxd/blob/master/doc/containers.md#type-nic

- however both approach won't work if your provider limits only ONE mac
address on your port. In this case you'd need either proxy-arp (somewhat
complicated, but possible), or simply use iptables to forward all traffic
for the secondary IP to the container.

-- 
Fajar
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.linuxcontainers.org/pipermail/lxc-users/attachments/20170520/8f4d7d00/attachment.html>