When you initialize a swarm or join a Docker host to an existing swarm, an overlay network called ingress is created on that Docker host, which handles the control and data traffic related to swarm services.
Docker Swarm will automatically create an overlay network, which does not work root-less.