Merge pull request #4997 from dvdksn/doc-vxlan-listen-addr

docs: clarify that --data-path-addr doesn't restrict access
This commit is contained in:
Sebastiaan van Stijn 2024-05-13 18:54:43 +02:00 committed by GitHub
commit 0ad1d55b02
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 6 additions and 0 deletions

View File

@ -117,6 +117,12 @@ data traffic from the management traffic of the cluster.
If unspecified, the IP address or interface of the advertise address is used.
Setting `--data-path-addr` does not restrict which interfaces or source IP
addresses the VXLAN socket is bound to. Similar to `--advertise-addr`, the
purpose of this flag is to inform other members of the swarm about which
address to use for control plane traffic. To restrict access to the VXLAN port
of the node, use firewall rules.
### <a name="data-path-port"></a> Configure port number for data traffic (--data-path-port)
The `--data-path-port` flag allows you to configure the UDP port number to use