Getting IPv6 into a macvlan Container: Endpoint sysctls and SLAAC

Wed, 26 Aug 2026 20:30:00 +0800

A macvlan container (ipvlan behaves the same) has no IPv6 by default: a link-local address and nothing else, no default route. The network is fine — Docker sets disable_ipv6 to 1 on the container interface whenever the network’s EnableIPv6 is false.

Here is the configuration that works on a home connection, where the ISP hands out the prefix dynamically.

Confirm that’s the problem

$ docker exec <container> ip -6 addr show eth0
    inet6 fe80::ef5:b3ae:a64e:e782/64 scope link      # link-local only

$ docker exec <container> cat /proc/sys/net/ipv6/conf/eth0/disable_ipv6
1                                                     # administratively off

Do not declare a v6 subnet on the docker network

The official-looking version is wrong for residential broadband:

Running mihomo as a LAN Gateway with Docker macvlan

Thu, 20 Aug 2026 19:30:00 +0800

I run mihomo in Docker on an N95 mini PC. macvlan gives the container its own LAN address (10.0.0.6), so any device that points its default gateway there gets rule-based proxying — without touching the router’s own routing table.

Two things bite you once the container is up: the host and its own macvlan containers cannot reach each other, and you still have to decide how clients switch over to the new gateway. This post covers both.

macvlan on Geek Vinkey

Getting IPv6 into a macvlan Container: Endpoint sysctls and SLAAC

Confirm that’s the problem

Do not declare a v6 subnet on the docker network

Running mihomo as a LAN Gateway with Docker macvlan