From a0da2d92d45be7b6c27d45ada3fbecf8e950ca10 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jan=20Rod=C3=A1k?= Date: Mon, 20 Jul 2026 21:40:44 +0200 Subject: [PATCH] docs: clarify network create isolate option MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Fixes: https://github.com/podman-container-tools/podman/issues/29162 Signed-off-by: Jan Rodák --- docs/source/markdown/options/opt.md | 5 ++++- docs/source/markdown/podman-network-create.1.md.in | 7 +++++++ 2 files changed, 11 insertions(+), 1 deletion(-) diff --git a/docs/source/markdown/options/opt.md b/docs/source/markdown/options/opt.md index 37a797ccc4..286aef1a50 100644 --- a/docs/source/markdown/options/opt.md +++ b/docs/source/markdown/options/opt.md @@ -20,7 +20,10 @@ manually by creating a custom route using `--route`. Additionally the `bridge` driver supports the following options: - `vlan`: This option assigns a VLAN tag and enables vlan\_filtering. Defaults to none. -- `isolate`: This option isolates networks by blocking traffic between those that have this option enabled. +- `isolate`: This option isolates bridge networks from other bridge networks. Must be set as `isolate=` (a value is required; bare `isolate` is invalid). Defaults to `strict`. Supported values: + - `strict`: Block traffic to and from all other bridge networks. This is the default when the option is omitted. + - `true`: Block traffic only between networks that also have isolation enabled (`true` or `strict`). + - `false`: Do not isolate the network; allow traffic to other bridge networks. Use this to restore the pre-Podman 6 / Netavark 2 behavior. - `com.docker.network.bridge.name`: This option assigns the given name to the created Linux Bridge - `com.docker.network.driver.mtu`: Sets the Maximum Transmission Unit (MTU) and takes an integer value. - `vrf`: This option assigns a Virtual Routing and Forwarding (VRF) routing table to the bridge interface. It accepts the VRF name and defaults to none. Can only be used with the Netavark network backend. diff --git a/docs/source/markdown/podman-network-create.1.md.in b/docs/source/markdown/podman-network-create.1.md.in index 8ccca4e26e..b3b9380e89 100644 --- a/docs/source/markdown/podman-network-create.1.md.in +++ b/docs/source/markdown/podman-network-create.1.md.in @@ -105,6 +105,13 @@ route. $ podman network create --subnet 192.168.33.0/24 --route 10.1.0.0/24,192.168.33.10 --opt no_default_route=true newnet ``` +Create a bridge network without isolation from other bridge networks (isolation +defaults to `strict`). The option must be given as `key=value`. +``` +$ podman network create --opt isolate=false mynet +mynet +``` + Create a network with a route type blackhole. This means the traffic to the destination subnet will be dropped silently. ``` $ podman network create --route 10.1.0.0/24,blackhole --opt no_default_route=true newnet