Separate Docker containers

[AnosVoldigoad]

Hi guys,

i want to run multiple docker under Truenas Scale which should be completely separate from each other. This means I want to have each Docker container in a separate VLAN so that they can't communicate with each other. Is this somehow possible?

 

[Nick2253]

Short answer, no.

Question about using VLANs with containers

I dinked around for a little bit in 21.04 and I didn't see a way to pick an interface to use with Plex, for example. Setting up the VLAN and bridge interfaces was a fairly similar and straight forward process similar to Core, but I could not find anything that allowed me to specify which...

www.truenas.com

 

[Patrick M. Hausen]

You can do that with FreeBSD jails on TrueNAS CORE. Just sayin' So depending on your actual workload/applications that might be a road to investigate.

 

[truecharts]

Short answer, no.

Question about using VLANs with containers

I dinked around for a little bit in 21.04 and I didn't see a way to pick an interface to use with Plex, for example. Setting up the VLAN and bridge interfaces was a fairly similar and straight forward process similar to Core, but I could not find anything that allowed me to specify which...

www.truenas.com

The long answer is: Yes.
You can directly connect an interface to a container on our Apps and the Launch-Docker button.

You can also try to use kubernetes network policies to limit between-apps comunication.

 

[Nick2253]

The long answer is: Yes.

Good to know. My understanding of the middle-ware is that it prevented you from being able to do something like that. Obviously, docker supports that, but there's a gulf between using the GUI, and having to manage everything from the CLI.

 

[truecharts]

Good to know. My understanding of the middle-ware is that it prevented you from being able to do something like that. Obviously, docker supports that, but there's a gulf between using the GUI, and having to manage everything from the CLI.

Actually, technically it should be possible just fine.
We already can create networkPolicy objects (it's not very well tested though) and both us and the Launch Docker button both support direct interface attachement as well :)

 

[AnosVoldigoad]

Thanks for the tips. I have assigned VLAN interfaces to the Docker, which can also be reached through them. Unfortunately, I have no idea how to prevent communication between the dockers. Is there a tutorial for this?

 

[PackElend]

You can directly connect an interface to a container on our Apps and the Launch-Docker button.

, I have no idea how to prevent communication between the dockers

can you prevent communication between containers if you use VLAN interfaces?

Or can they still speak through Kubernetes internal network?
Does deactivating "Enable Integrated Loadbalancer" make any change?