Signed-off-by: Oriol Francès <oriolfa@gmail.com>
| ... | ... |
@@ -66,11 +66,17 @@ If you need to add an HTTP Proxy, set a different directory or partition for the |
| 66 | 66 |
Docker runtime files, or make other customizations, read our systemd article to |
| 67 | 67 |
learn how to [customize your systemd Docker daemon options](/articles/systemd/). |
| 68 | 68 |
|
| 69 |
-## Running docker with a manually defined network |
|
| 69 |
+## Running Docker with a manually-defined network |
|
| 70 | 70 |
|
| 71 |
-Users of systemd-network >= v220 who have configured their network manually by |
|
| 72 |
-creating an `<interface>.network` file in `/etc/systemd/network/` may have to add |
|
| 73 |
-the following line to make sure IP Forwarding is not disabled: |
|
| 71 |
+If you manually configure your network using `systemd-network` version 220 or |
|
| 72 |
+higher, containers you start with Docker may be unable to access your network. |
|
| 73 |
+Beginning with version 220, the forwarding setting for a given network |
|
| 74 |
+(`net.ipv4.conf.<interface>.forwarding`) defaults to *off*. This setting |
|
| 75 |
+prevents IP forwarding. It also conflicts with Docker which enables the |
|
| 76 |
+`net.ipv4.conf.all.forwarding` setting within a container. |
|
| 77 |
+ |
|
| 78 |
+To work around this, edit the `<interface>.network` file in |
|
| 79 |
+`/etc/systemd/network/` on your Docker host add the following block: |
|
| 74 | 80 |
|
| 75 | 81 |
``` |
| 76 | 82 |
[Network] |
| ... | ... |
@@ -79,14 +85,7 @@ IPForward=kernel |
| 79 | 79 |
... |
| 80 | 80 |
``` |
| 81 | 81 |
|
| 82 |
-From systemd-network v220 onwards, the forwarding setting for a given network |
|
| 83 |
-defaults to *off* (instead of not being set). This prevents IP Forwarding to |
|
| 84 |
-happen, since docker only enables `net.ipv4.conf.all.forwarding` (which is |
|
| 85 |
-overriden by `net.ipv4.conf.<interface>.forwarding` being disabled) |
|
| 86 |
- |
|
| 87 |
-Adding `IPForward=kernel` to the `<interface>.network` file prevents this |
|
| 88 |
-behavior, allowing IP Forwarding to function as expected. |
|
| 89 |
- |
|
| 82 |
+This configuration allows IP forwarding from the container as expected. |
|
| 90 | 83 |
## Uninstallation |
| 91 | 84 |
|
| 92 | 85 |
To uninstall the Docker package: |