Creating macvtap interface in a container that uses Docker network

General Discussions
1

image.png746×472 18.3 KB
I have a use case where I created a Docker macvlan network (default bridge mode) & connect this network to a running Docker container (e.g C1). So the container will have a new macvlan interface(e.g eth1).

docker network create -d macvlan --subnet=172.16.16.0/24 --gateway=172.16.16.1 -o parent=ens224 macvlan-ens224
docker network connect macvlan-ens224 C1

Inside container C1, I created a macvtap interface using the macvlan (eth1) interface & assigned IP.

ip link add link eth1 name mymacvtap0 type macvtap mode private
ip addr add 172.17.17.2/24 dev mymacvtap0
ip link set up dev mymacvtap0

Now, When I ping to some IP of subnet 172.17.17.2/24 from inside the container ARP request is broadcasted using the source MAC address of container macvtap interface. Target IP sends back ARP reply. ARP reply reaches to physical interface ens224 (seen from tcpdump). But the Reply never reaches inside the container.

Someone please point out what am I missing here?