This is a list of CNI network plugins maintained by the containernetworking team. For more information, see the individual READMEs.
Read CONTRIBUTING for build and test instructions.
bridge: Creates a bridge, adds the host and the container to it
ipvlan: Adds an ipvlan interface in the container
macvlan: Creates a new MAC address, forwards all traffic to that to the container
ptp: Creates a veth pair
host-device: Moves an already-existing device into a container
win-bridge: Creates a bridge, adds the host and the container to it
win-overlay: Creates an overlay interface to the container
dhcp: Runs a daemon on the host to make DHCP requests on behalf of a container
host-local: Maintains a local database of allocated IPs
static: Allocates static IPv4/IPv6 addresses to containers
flannel: Generates an interface corresponding to a flannel config file
tuning: Changes sysctl parameters of an existing interface
portmap: An iptables-based portmapping plugin. Maps ports from the host’s address space to the container
bandwidth: Allows bandwidth-limiting through use of traffic control tbf (ingress/egress)
sbr: A plugin that configures source based routing for an interface (from which it is chained)
firewall: A firewall plugin which uses iptables or firewalld to add rules to allow traffic to/from the container
For any questions about CNI, please reach out via:
If you have a security issue to report, please do so privately to the email addresses listed in the OWNERS file.