[Not Accepted] Allow Apps to Use DHCP to Bind IP address

Problem/Justification
I would like apps to behave like VMs do where they are assigned their own IPs directly from DHCP (or static). In a recent June/July update, being able to assign apps their own IPs was added, but it’s not entirely what is desired. It seems as though outbound traffic still happens from the main IP of TrueNAS. It is also somewhat obtuse to setup despite following the guides and YouTube videos.

Impact
It is difficult to truly isolate apps and their networks from each other.

User Story
I would like the various apps that I would run with in TrueNAS to have their independently managed network stacks that can be routed accordingly and managed through my router via DHCP. There are number of different things I’d like to be able to do, but the most obvious (and it has been mentioned in other posts on the form) is to have a Torrent client have it’s own IP address that can be routed through a VPN at the router/switch level. Unify devices make this easy to do provided the client runs on it’s own IP address.

For example:
My TrueNas instance is reachable at 10.13.1.100
I run a Plex server which is accessible on 10.13.1.101.
I run a torrent client which is accessible on 10.13.1.102

All inbound and outbound traffic is done through the respective IP addresses independentally (like is done with VMs or Jails previously).

2 Likes

This is similar to an accepted feature titled allow-apps-to-have-their-own-ip but was from 2024.

Docker does not support DHCP for “apps”. Ergo, I doubt this will happen.

The closest you can get is to assign a range of IPs to a macvlan docker network and then docker will assign from that range to the member containers

1 Like

Will the IPs show up correctly in my switch.

One key point would be that I want to make sure that from a management perspective that things make sense.

I want it to be clear in my Unify switch.

that request was implemented by having the apps endpoints bind to an IP the TrueNAS host already has, so it’s not quite what you’re requesting (it also only works for ingress and not egress).
Since you mention wanting to “isolate apps” I suggest you peek at my feature request here and vote for it if you agree with it.

There have been several requests in the area of app networking, some of which are linked in this thread. The recommendation is to explore these requests. Closing this request and releasing votes.