Publish port in Docker Swarm creates another net interface in container (on ingress network)

Docker Engine Swarm
1

When I publish the port with

ports:
  - 5455:5454

even though I specify my own overlay network net2 (192.168.5.0)

networks:
  net2:
    external: true

Another interface(10.x.x.x) beside the one for my overlay network is added to container, and it’s not accessible from the host of the container.

Ethernet adapter vEthernet (8a7c739f5f6da5927f0c7be64de4c8fe9d8bf2ebde4eedb67b802f2cfc7bf572):

   Connection-specific DNS Suffix  . :
   Link-local IPv6 Address . . . . . : fe80::6884:5dcb:6787:bf6c%76
   IPv4 Address. . . . . . . . . . . : 10.0.0.46
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 10.0.0.1

Ethernet adapter vEthernet (6793d3b7e4e975047826c5f4aaf392d63da6ab39b46b48275d42585789099ac5):

   Connection-specific DNS Suffix  . :
   Link-local IPv6 Address . . . . . : fe80::1d25:3032:6d51:664e%80
   IPv4 Address. . . . . . . . . . . : 192.168.5.25
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 192.168.5.1

This interface belongs to the default ingress overlay network:

NETWORK ID     NAME          DRIVER    SCOPE
ae4mivnst6c6   ingress       overlay   swarm
d92105c047f6   nat           nat       local
d3ad19ab5ca5   none          null      local
wfvf9vd1p4bu   net2          overlay   swarm