0

All the container networking examples I saw seems to provide container a L3 network which means it is on a separate L2 network from host. Bridge interface also seems to for L2 network between containers only.

Is it possible to launch a docker container such that it has full Layer 2 access. For example, to run tcpdump within the container to capture packet of a specific host interface?

Improve this question

1 Answer 1

Reset to default
1

Sure. Launch a container with --network host and it’ll not get its own network namespace. This has massive security implications.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .