I have a VM with
- a public IP Address on eth0
- an internal private ip address on ens01 (10.0.0.1)
- up to 5 private IP aliases on ens01 (10.0.0.2, .3, .4, .5, .6)
I want to route traffic to my docker containers through the private network from a reverse proxy running on another VM.
I want all containers to use host networking, but i want each listen on one and only one of the private IP addresses. For example every container should be able to listen on port 80 bound to its own private IP address.
My plan is to put a firewall rule on the public IP to prevent any traffic from entering or leaving the VM through the public internet.
First of all, is this even possible? and if so how do I accomplish it?
>Solution :
This is possible, you need to create a macvlan network https://docs.docker.com/network/macvlan/
And assign your containers to it with their respective ip adresses.