Universal Control Plane (UCP) can use your local networking drivers to orchestrate your cluster. You can create a config network, with a driver like MAC VLAN, and you use it like any other named network in UCP. If it’s set up as attachable, you can attach containers.
Security
Encrypting communication between containers on different nodes works only on overlay networks.
Always use UCP to create node-specific networks. You can use the UCP web UI or the CLI (with an admin bundle). If you create the networks without UCP, the networks won’t have the right access labels and won’t be available in UCP.
config-only
network name with a
node hostname prefix, like node1/my-cfg-network
,
node2/my-cfg-network
, etc. This is necessary to ensure that
the access labels are applied consistently to all of the back-end
config-only networks. UCP routes the config-only network creation
to the appropriate node based on the node hostname prefix. All
config-only networks with the same name must belong in the same
collection, or UCP returns an error. Leaving the access label
empty puts the network in the admin’s default collection, which is
/
in a new UCP installation.