will fill up. Therefore, although this mode is a simple solution, it is likely not a
good fit for many implementations.
Figure 10.5 Container networking with Transparent mode
L2 Bridge/Tunnel This is also known as SDN mode. Either l2bridge or l2tunnel
drivers can be used to connect container endpoints to an overlay virtual network in
Microsoft cloud-based deployments. In this case, the container host will be a guest
VM. The only difference between the two modes is that l2tunnel forwards all
container network traffic to the physical Hyper-V host (regardless of subnet), while
the l2bridge driver forwards only cross-subnet (or cross-host) traffic to the
physical Hyper-V host. Network traffic between container endpoints attached to
the same subnet on the same host will be bridged directly in the container host
VM. These modes utilize the Windows Server 2016 software-defined networking
stack including the Network Controller role, NC Host Agent, and virtual filtering
platform (VFP) vSwitch extension to enforce network policy, and they provide
connectivity to a virtual network by encapsulating the container traffic. Dynamic
IP address assignment is handled through the Host Network Service (HNS) in the
Container Host VM, and static IP assignment is not possible. For more information