diff --git a/docs/source/markdown/options/opt.md b/docs/source/markdown/options/opt.md index 526cafafe4..37a797ccc4 100644 --- a/docs/source/markdown/options/opt.md +++ b/docs/source/markdown/options/opt.md @@ -14,7 +14,7 @@ All drivers accept the `mtu`, `metric`, `no_default_route` and options. - `mtu`: Sets the Maximum Transmission Unit (MTU) and takes an integer value. - `metric` Sets the Route Metric for the default route created in every container joined to this network. Accepts a positive integer value. Can only be used with the Netavark network backend. -- `no_default_route`: If set to 1, Podman will not automatically add a default route to subnets. Routes can still be added +- `no_default_route`: If set to `true`, Podman will not automatically add a default route to subnets. Routes can still be added manually by creating a custom route using `--route`. Additionally the `bridge` driver supports the following options: diff --git a/docs/source/markdown/podman-network-create.1.md.in b/docs/source/markdown/podman-network-create.1.md.in index 5cfc24f782..8ccca4e26e 100644 --- a/docs/source/markdown/podman-network-create.1.md.in +++ b/docs/source/markdown/podman-network-create.1.md.in @@ -46,7 +46,13 @@ Ignore the create request if a network with the same name already exists instead #### **--route**=*route* -A static route in the format `,,`. This route will be added to every container in this network. Only available with the netavark backend. It can be specified multiple times if more than one static route is desired. +A static route in the format `,,`. +The gateway must be a valid ip address or alternatively a type can be set instead which must be either +of `blackhole`, `unreachable` or `prohibit` and means the subnet will not be routed anywhere. +This route will be added to every container in this network. It can be specified multiple times if more than one static route is desired. + +Note, routes are added into the container namespace, if a container is given the CAP_NET_ADMIN capability it is able to alter +the routes so this cannot be used for security relevant things in that case. @@option subnet @@ -96,7 +102,12 @@ $ podman network create --subnet 192.168.33.0/24 --route 10.1.0.0/24,192.168.33. Create a network with a static subnet and a static route without a default route. ``` -$ podman network create --subnet 192.168.33.0/24 --route 10.1.0.0/24,192.168.33.10 --opt no_default_route=1 newnet +$ podman network create --subnet 192.168.33.0/24 --route 10.1.0.0/24,192.168.33.10 --opt no_default_route=true newnet +``` + +Create a network with a route type blackhole. This means the traffic to the destination subnet will be dropped silently. +``` +$ podman network create --route 10.1.0.0/24,blackhole --opt no_default_route=true newnet ``` Create a Macvlan based network using the host interface eth0. Macvlan networks can only be used as root.