I am working on requirement where we need to create network in which host server should not access the containers. We have achieved for single server using Macvlan Network and when extending the same to the cluster with Docker swarm realized that the scope of the Macvlan driver is local.
# docker network ls
NETWORK ID NAME DRIVER SCOPE
c1e162df6ba0 bridge bridge local
dd4c37820549 docker_gwbridge bridge local
c88f997a2fa7 host host local
3afvn8qnwl1f ingress overlay swarm
c4899a391b91 isolated_nw1 macvlan local
1df2947aad7b none null local
31tlgcm33m3b swarm_network overlay swarm
So my question is it possible to create a network using macvlan driver which can be extended to swarm?