delonix network
Redes de utilizador: create, ls, inspect, rm, apply — bridge e overlay realizados fisicamente.
User networks: create, ls, inspect, rm, apply — bridge and overlay are physically realized.
Para os drivers bridge e overlay, o create
orquestra o registo declarativo (NetworkStore) E o plano físico rootless em conjunto —
bridge dentro do netns do holder; overlay sobe um uplink VXLAN cifrado com
WireGuard entre nós (device dlxvx<vni> a masterizar a bridge, FDB semeado com os
pares), tudo realizável sem privilégio de host. macvlan/ipvlan ficam só
registados no store — o create AVISA alto que a rede não foi realizada fisicamente
(precisam de CAP_NET_ADMIN na init-netns do host, fora do modelo rootless).
For the bridge and overlay drivers,
create orchestrates both the declarative record (NetworkStore) AND the
rootless physical plane together — bridge inside the holder's netns;
overlay brings up a WireGuard-encrypted VXLAN uplink between nodes (a
dlxvx<vni> device enslaved to the bridge, FDB seeded with the peers), all
achievable without host privilege. macvlan/ipvlan only get recorded in
the store — create WARNS loudly that the network wasn't physically realized (they
need CAP_NET_ADMIN in the host's init-netns, outside the rootless model).
📄 Implementação real em Rust: cmd/network.rs
Usage: dlx network [OPTIONS] <COMMAND>
Commands:
dash Dashboard (KPIs + table) of the networks — interactive TUI, or `--once` snapshot
ls List the networks
node WireGuard identity of THIS node, for the encrypted VXLAN overlay between nodes (`network create --driver overlay`). The private key stays 0600 in `<root>/wg/node.key`; the public one is what you hand out to the peers
create Create a network
inspect Detail of a network
describe Readable detail of one or more networks, `kubectl describe` style (for humans; use `inspect` for the usual compact view)
rm Remove a network
apply Apply the `kind: Network` documents of a manifest (idempotent by name)
help Print this message or the help of the given subcommand(s)
Options:
--l18n <en|pt> Output language: `en` (default) or `pt` (Portuguese, pt_AO). Also settable via `$DELONIX_L18N`. Global — works before any subcommand
-h, --help Print helpnetwork describe
Readable detail of one or more networks, kubectl describe style (for humans; use inspect for the usual compact view)
Usage: dlx network describe [OPTIONS] <NAMES>...
Arguments:
<NAMES>...
Options:
--l18n <en|pt> Output language: `en` (default) or `pt` (Portuguese, pt_AO). Also settable via `$DELONIX_L18N`. Global — works before any subcommand
-h, --help Print helpExemplos
delonix network describe minha-redenetwork node
WireGuard identity of THIS node, for the encrypted VXLAN overlay between nodes (network create --driver overlay). The private key stays 0600 in <root>/wg/node.key; the public one is what you hand out to the peers
Usage: dlx network node [OPTIONS] <COMMAND>
Commands:
init Generate the node key (if it does not exist yet) and print the public one with the context of what to do with it. Idempotent
key Print only the public key (for composing in scripts)
help Print this message or the help of the given subcommand(s)
Options:
--l18n <en|pt> Output language: `en` (default) or `pt` (Portuguese, pt_AO). Also settable via `$DELONIX_L18N`. Global — works before any subcommand
-h, --help Print helpExemplos
delonix network node lsnetwork dash
Dashboard (KPIs + table) of the networks — interactive TUI, or --once snapshot
Usage: dlx network dash [OPTIONS]
Options:
--l18n <en|pt> Output language: `en` (default) or `pt` (Portuguese, pt_AO). Also settable via `$DELONIX_L18N`. Global — works before any subcommand
--once
--json
-h, --help Print helpExemplos
delonix network dashnetwork create
Create a network
Usage: dlx network create [OPTIONS] <NAME>
Arguments:
<NAME>
Options:
--driver <DRIVER> `bridge` (default, filtered by the firewall) | `macvlan` | `ipvlan` (NOT filtered, see warning) | `overlay` (inter-node VXLAN) [default: bridge]
--l18n <en|pt> Output language: `en` (default) or `pt` (Portuguese, pt_AO). Also settable via `$DELONIX_L18N`. Global — works before any subcommand
--parent <PARENT> Host parent NIC (required for macvlan/ipvlan)
--subnet <SUBNET> Subnet (required for macvlan/ipvlan, e.g.: `192.168.1.0/24`)
--gateway <GATEWAY> Gateway (macvlan/ipvlan) [default: ""]
--vni <VNI> VXLAN Network Identifier (required for overlay)
--peer <PEERS> Peer node (`<ip>` or `<ip>=<wg_pubkey>=<wg_ip>`), repeatable (overlay)
--wg-ip <WG_IP> WireGuard tunnel IP of this node (encrypted overlay)
-h, --help Print helpExemplos
delonix network create backenddelonix network create mesh --driver overlay --vni 42 --peer 10.0.0.2network ls
List the networks
Usage: dlx network ls [OPTIONS]
Options:
--l18n <en|pt> Output language: `en` (default) or `pt` (Portuguese, pt_AO). Also settable via `$DELONIX_L18N`. Global — works before any subcommand
-o, --output <OUTPUT> Output format: `table` (default) or `json` (ADR-0005) [default: table] [possible values: table, json]
-h, --help Print helpExemplos
delonix network lsnetwork inspect
Detail of a network
Usage: dlx network inspect [OPTIONS] <NAME>
Arguments:
<NAME>
Options:
--l18n <en|pt> Output language: `en` (default) or `pt` (Portuguese, pt_AO). Also settable via `$DELONIX_L18N`. Global — works before any subcommand
-h, --help Print helpExemplos
delonix network inspect backendnetwork rm
Remove a network
Usage: dlx network rm [OPTIONS] <NAME>
Arguments:
<NAME>
Options:
--l18n <en|pt> Output language: `en` (default) or `pt` (Portuguese, pt_AO). Also settable via `$DELONIX_L18N`. Global — works before any subcommand
-h, --help Print helpExemplos
delonix network rm backendnetwork apply
Apply the kind: Network documents of a manifest (idempotent by name)
Usage: dlx network apply [OPTIONS]
Options:
-f, --file <FILE>
--l18n <en|pt> Output language: `en` (default) or `pt` (Portuguese, pt_AO). Also settable via `$DELONIX_L18N`. Global — works before any subcommand
-h, --help Print helpExemplos
delonix network apply -f delonix-manifest.yamlLaboratórioLab
Cria uma rede própria e confirma a descoberta por nome (DNS interno) entre dois containers na mesma rede.
delonix network create minha-rede
delonix container run -d --name db --net minha-rede postgres:16-alpine
delonix container run --rm --net minha-rede alpine ping -c1 dbCreate your own network and confirm name-based discovery (internal DNS) between two containers on the same network.
delonix network create my-net
delonix container run -d --name db --net my-net postgres:16-alpine
delonix container run --rm --net my-net alpine ping -c1 dbDesafioChallenge
Corre network describe minha-rede e identifica que
IP a rede atribuiu ao db; depois tenta network create --driver macvlan e
lê o aviso — porque é que esse driver não é realizado fisicamente em rootless?
Run network describe my-net and find the IP it assigned to
db; then try network create --driver macvlan and read the warning — why
isn't that driver physically realized in rootless?