Docker

A macvlan container (ipvlan behaves the same) has no IPv6 by default: a link-local address and nothing else, no default route. The network is fine — Docker sets disable_ipv6 to 1 on the container interface whenever the network’s EnableIPv6 is false. Here is the configuration that works on a home connection, where the ISP hands out the prefix dynamically. Confirm that’s the problem $ docker exec <container> ip -6 addr show eth0 inet6 fe80::ef5:b3ae:a64e:e782/64 scope link # link-local only $ docker exec <container> cat /proc/sys/net/ipv6/conf/eth0/disable_ipv6 1 # administratively off Do not declare a v6 subnet on the docker network The official-looking version is wrong for residential broadband: ...

I run mihomo in Docker on an N95 mini PC. macvlan gives the container its own LAN address (10.0.0.6), so any device that points its default gateway there gets rule-based proxying — without touching the router’s own routing table. Two things bite you once the container is up: the host and its own macvlan containers cannot reach each other, and you still have to decide how clients switch over to the new gateway. This post covers both. ...