Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 23 Dec 2020 10:40:35 -0800
From:      Ihor Antonov <ihor@antonovs.family>
To:        freebsd-questions@freebsd.org
Subject:   Re: Network namespaces in FreeBSD
Message-ID:  <2581038e-fa0f-231d-ae33-1b42d50c8600@antonovs.family>
In-Reply-To: <A577602D-C1A9-4B6E-822E-03641A4070A0@FreeBSD.org>
References:  <SG2PR01MB2443D481AC24AF7207218E0EF1DE0.ref@SG2PR01MB2443.apcprd01.prod.exchangelabs.com> <SG2PR01MB2443D481AC24AF7207218E0EF1DE0@SG2PR01MB2443.apcprd01.prod.exchangelabs.com> <20201223182227.da6c11d3604eb07bb4f18ce5@sohara.org> <A577602D-C1A9-4B6E-822E-03641A4070A0@FreeBSD.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On 12/23/20 10:32 AM, Kristof Provost wrote:
> On 23 Dec 2020, at 19:22, Steve O'Hara-Smith wrote:
>> On Wed, 23 Dec 2020 16:48:11 +0000
>> Ameya Deshpande via freebsd-questions <freebsd-questions@freebsd.org> 
>> wrote:
>>
>>> Hi,
>>>
>>> I am new to FreeBSD. I was wondering if there is concept like Network
>>> Namespaces in FreeBSD, like it is in Linux?
>>
>>     There is something similar see man setfib for details.
>>
> I’ve only briefly played with linux network namespaces, but aren’t vnet 
> jails much closer to that?

I have more experience with Linux than with FreeBSD, so I don't know for 
sure what setfib is about.

VNET jails is the closest thing that comes to mind when comparing to 
Linux network namespaces. Unlike Linux, in a jail you will get all other 
namespaces separated too (e.g. mount, pid etc.)

Unfortunately I don't know if it is possible to get exactly same 
behavior as in Linux - share all other namespaces except for network 
stack. I imagine you can get something like this with Capsicum, but it 
would require making changes to the app.

Ihor



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?2581038e-fa0f-231d-ae33-1b42d50c8600>