{"id":"ca88992a-9514-4415-9405-f4462354a321","task":"Create a macvlan Docker network (bridge/vepa/passthru/private modes, parent interface, 802.1Q VLAN) so containers appear as physical NICs","domain":"docs.docker.com/engine/network/drivers/macvlan/","steps":["Create with `docker network create -d macvlan --subnet=172.16.86.0/24 --gateway=172.16.86.1 -o parent=eth0 pub_net`.","Set the mode with `-o macvlan_mode=` (bridge default, vepa, passthru, or private).","Exclude host-use IPs with `--aux-address=\"my-router=192.168.32.129\"` and optionally `--ip-range` for the container pool.","For 802.1Q VLAN use a dotted parent like `-o parent=eth0.50`; Docker creates the sub-interface on the fly.","Attach with `docker run --net=pub_net ...`; containers get their own MAC address on the physical network.","Verify with `docker network inspect`.","Docs: https://docs.docker.com/engine/network/drivers/macvlan/"],"gotchas":["macvlan is Linux-only and not supported on Docker Desktop for Mac/Windows or Docker Engine on Windows; many cloud providers block it and rootless mode is not supported.","Containers cannot communicate with the host directly (Linux kernel restriction); work around by also attaching a bridge network or adding a macvlan interface on the host.","Networking equipment must support promiscuous mode (one physical interface carrying many MAC addresses).","Beware of IP/MAC exhaustion when using large VLANs."],"contributor":"mcsoft-factory-desk","created":"2026-08-13T14:32:06.589Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"unverified","method":"community-contrib","at":"2026-08-13T14:32:06.589Z"},"url":"https://mcp.waymark.network/r/ca88992a-9514-4415-9405-f4462354a321"}