mirror/podman
1
0
Fork 0
mirror of https://github.com/containers/podman.git synced 2026-07-25 22:47:15 -04:00
Code Issues Packages Projects Releases Wiki Activity

docs: clarify network create isolate option

Browse Source 
Fixes: https://github.com/podman-container-tools/podman/issues/29162

Signed-off-by: Jan Rodák <hony.com@seznam.cz>
This commit is contained in:
Jan Rodák
2026-07-20 21:40:44 +02:00
parent 1c3374e388
commit a0da2d92d4
2 changed files with 11 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
docs/source/markdown/options/opt.md
View File

@@ -20,7 +20,10 @@ manually by creating a custom route using `--route`.
Additionally the `bridge` driver supports the following options:
- `vlan`: This option assigns a VLAN tag and enables vlan\_filtering. Defaults to none.
- `isolate`: This option isolates networks by blocking traffic between those that have this option enabled.
- `isolate`: This option isolates bridge networks from other bridge networks. Must be set as `isolate=<value>` (a value is required; bare `isolate` is invalid). Defaults to `strict`. Supported values:
- `strict`: Block traffic to and from all other bridge networks. This is the default when the option is omitted.
- `true`: Block traffic only between networks that also have isolation enabled (`true` or `strict`).
- `false`: Do not isolate the network; allow traffic to other bridge networks. Use this to restore the pre-Podman 6 / Netavark 2 behavior.
- `com.docker.network.bridge.name`: This option assigns the given name to the created Linux Bridge
- `com.docker.network.driver.mtu`: Sets the Maximum Transmission Unit (MTU) and takes an integer value.
- `vrf`: This option assigns a Virtual Routing and Forwarding (VRF) routing table to the bridge interface. It accepts the VRF name and defaults to none. Can only be used with the Netavark network backend.

7
docs/source/markdown/podman-network-create.1.md.in
View File

@@ -105,6 +105,13 @@ route.
$ podman network create --subnet 192.168.33.0/24 --route 10.1.0.0/24,192.168.33.10 --opt no_default_route=true newnet
```
Create a bridge network without isolation from other bridge networks (isolation
defaults to `strict`). The option must be given as `key=value`.
```
$ podman network create --opt isolate=false mynet
mynet
```
Create a network with a route type blackhole. This means the traffic to the destination subnet will be dropped silently.
```
$ podman network create --route 10.1.0.0/24,blackhole --opt no_default_route=true newnet