Docker macvlan network container bridge host network segment independent IP
By default, each macvlan can communicate with each other, but cannot communicate with the host! ! The reason for this is that intercommunication is prohibited for security. For example, the host machine pings the ip of the container. Although they belong to the same network segment, they cannot be pinged, and vice versa.