https://www.mawenqian.com/zh/tags/networking/ Recent content in Networking on 极客Vinkey https://www.mawenqian.com/images/papermod-cover.png https://www.mawenqian.com/images/papermod-cover.png Hugo zh-CN MA Wenqian · mawenqian.com Wed, 26 Aug 2026 21:44:00 +0800 https://www.mawenqian.com/zh/docker-macvlan-ipv6/ Wed, 26 Aug 2026 20:30:00 +0800 https://www.mawenqian.com/zh/docker-macvlan-ipv6/ <p>macvlan（ipvlan 同理）容器默认没有 IPv6：只有 link-local 地址，没有默认路由。原因不是网络不通，而是 Docker 在网络的 <code>EnableIPv6</code> 为 false 时，会主动把容器接口的 <code>disable_ipv6</code> 置 1。</p> <p>下面是家庭宽带（前缀由运营商动态下发）场景下的正确配置。</p> <!-- more --> <h2 id="先确认是这个问题">先确认是这个问题</h2> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-console" data-lang="console"><span class="line"><span class="cl"><span class="gp">$</span> docker <span class="nb">exec</span> &lt;容器&gt; ip -6 addr show eth0 </span></span><span class="line"><span class="cl"><span class="go"> inet6 fe80::ef5:b3ae:a64e:e782/64 scope link # 只有 link-local </span></span></span><span class="line"><span class="cl"><span class="err"> </span></span></span><span class="line"><span class="cl"><span class="gp">$</span> docker <span class="nb">exec</span> &lt;容器&gt; cat /proc/sys/net/ipv6/conf/eth0/disable_ipv6 </span></span><span class="line"><span class="cl"><span class="go">1 # 被管理性关闭 </span></span></span></code></pre></div><h2 id="不要给-docker-网络声明-v6-子网">不要给 docker 网络声明 v6 子网</h2> <p>看着「正规」的写法是这样，但对家庭宽带是错的：</p> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-yaml" data-lang="yaml"><span class="line"><span class="cl"><span class="nt">networks</span><span class="p">:</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="nt">macvlan_net</span><span class="p">:</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="nt">enable_ipv6</span><span class="p">:</span><span class="w"> </span><span class="kc">true</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="nt">ipam</span><span class="p">:</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="nt">config</span><span class="p">:</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span>- <span class="nt">subnet</span><span class="p">:</span><span class="w"> </span><span class="m">2408</span><span class="p">:</span><span class="l">xxxx:xxxx:xxx::/64 </span><span class="w"> </span><span class="c"># ← 别这么写</span><span class="w"> </span></span></span></code></pre></div><p>这个 <code>/64</code> 是运营商通过 DHCPv6-PD 下发的，<strong>它会变</strong>。前缀一换，容器还抱着旧前缀里切出来的地址，而那个前缀已经不再路由到你家了——表现是 IPv6 静默失效，配置文件里却白纸黑字写着一个看起来没问题的地址。</p>