Netavark DHCP Proxy Server

See https://github.com/containers/netavark-dhcp-proxy for the newest changes

Short Summary

Adding the macvlan functionality to Podman’s new network stack

Objective

The old network stack that used container-networking-plugins (CNI) had the ability to configure a macvlan network. The primary purpose of the macvlan set up was to provide the container with a routable IP address so Network Address Translation (NAT) and port mapping was not needed. This functionality has not been added to the new network stack (netavark) yet.

One of the challenges of the macvlan set up is that containers do not typically have a full set of network tools installed in them. And most certainly, very few have things like dhclient. And even if they did, they will usually lack an init system that could deal with re-leasing IP addresses. The solution for CNI was to create a separate binary that acted as a “dhcp-proxy” for macvlan containers. The dhcp-proxy was generally run by systemd and it performed the DHCP operations needed by the container. This lease information that was then provided by the DHCP server was then statically assigned to the container by Podman.

For the new implementation, we will largely follow the same architecture but will attempt to provide improvements as needed.

Use case

I have a web-based service that runs from a container. While I know I can expose the service from the container host using port-mapping, I do not want users to have to specify any port related information when communicating with the web service. I want the container to appear as if it were any other host on the network to its users.

Build

$ make
$ make build-release

Testing


You can run make test to run both unit and integration tests.  There are also make targets
for `unit` and `integration` that can be run separately.

$ make test

Comments

Tweak Makefile

Some tweaks for the Makefile that allow for more granular testing. Also created some .PHONY targets for building the proxy and the client. This should be a good start. More tightening will be required later but I didn't want to go overboard because we will likely be able to leverage netavarks Makefile at some point (when we merge?)

Added validate target. This runs cargo fmt and clippy to ensure code is clean and valid. Consider running this before each commit.

Signed-off-by: Brent Baude [email protected]

opened by baude 1
Lots of changes
This PR is a culmination of changes:

Remove IPResponse struct and replace with Lease.

Add CLI options to client for:

--file read config from file

--port use a non-default grpc-port

read config from command line (/dev/stdin)

Small tweaks to the Makefile

Push client code from client.rs to commands/setup|teardown.rs

Add test configuration file

Signed-off-by: Brent Baude [email protected]
opened by baude 0