Setup Pihole On Your Synology NAS Using Docker with Macvlan & Bridge Networks
ฝัง
- เผยแพร่เมื่อ 29 มิ.ย. 2024
- In this video, Setup Pihole On Your Synology NAS Using Docker with Macvlan & Bridge Networks, we will walk you through how to set up Pi-hole on a Synology Docker Container using Macvlan and Bridge networks. Pi-hole is a powerful tool that allows you to block unwanted ads, trackers, and malicious content from your network.
We'll start by explaining the difference between a Macvlan network and a Bridge network, and how to create these networks on your Synology NAS. We'll then guide you through the process of creating a Docker container for Pi-hole and configuring it to use the Macvlan network and Bridge network.
By the end of this video, you'll have a fully functional Pi-hole container running on your Synology NAS, configured to use both Macvlan and Bridge networks. This will give you greater control over your network's traffic and provide a more secure browsing experience for all your devices.
00:00 - Introduction
00:34 - Prerequisites
03:39 - Creating the Macvlan Network
05:54 - Creating the Pihole Bridge Network
07:39 - Creating the Pihole Docker Container
11:53 - How To Access Pihole
12:29 - DNS Considerations
13:15 - Closing Segment
Share this video - • Setup Pihole On Your S...
Subscribe to this channel - goo.gl/dRbTqD
Channel Support:
Buy Tony A Coffee - www.buymeacoffee.com/quiktech
PayPal - paypal.me/quiktechsolutionsllc
Earn $100 Cloud Credits from Digital Ocean by signing up at:
m.do.co/c/41d68f5e11bd
Amazon Affiliate Storefront:
www.amazon.com/shop/quiktechs...
Command used to create the Macvlan Network in this video. Be sure to edit the command to reflect your own network.
sudo docker network create -d macvlan -o parent=eth(x) --subnet=192.168.x.0/24 --gateway=192.168.x.1 --ip-range=192.168.x.x/32 ph_network
Disclaimers:
This video is not made for or intended for kids.
I participate in the Amazon Affiliate/Influencer Program. When purchasing using my Amazon Affiliate links, your price doesn't change. You pay the same, but I do get a small percentage of the sale in commission. This helps the channel to continue creating content you enjoy viewing.
All images used in this video are my own or taken from pixabay.com.
About Tony:
I am a retired educator of 32 years. I started out as an instrumental music teacher and evolved into technology support. After many years of providing technology support to teachers and students, the last ten years of my career, I was in a leadership position of Technology Coordinator and also Supervisor of Technology. My passion has always been helping people. I hope to continue helping people through my TH-cam channel.
Contact Tony at:
quiktechreview@gmail.com
Follow me on:
Twitter @quiktechreview
Facebook @quiktechsolutionsllc
Instagram @quiktechsolutionsllc
Hope you enjoyed this video. Please subscribe, like, & share. - แนวปฏิบัติและการใช้ชีวิต
![อาจารย์ยอด : ลุงแว่วเล่าเรื่องผี [ผี]](http://i.ytimg.com/vi/Fd2Qsy4dqpM/mqdefault.jpg)
Excellent video Tony. Its exactly one of those topics that isnt covered enough on youtube. thank you for covering it so clearly!
Thanks Avi! Much appreciated.
This worked perfectly and was exactly what I was looking to do on my new DS1621+. Also served as a great primer on what the macvlan driver can be used for. Going to make setting up other docker containers easy. Thanks for the clear, no nonsense directions.
Thank you so much! Glad you enjoyed the video. Have a great day!
Absolutely loved the video, Tony! I think you provided the overall best, most informative, and most concise video on this topic. The macvlan step is extremely confusing to some but you explained it so easily - will definitely be referring anyone who has questions on it to this video!
Frank, OMG, thank you so much for such kind words. You are too kind! Your video on this topic is also outstanding as all all of your videos are excellent. So, for you to say this, I really appreciate it. Thanks for watching. Have a wonderful day!
Outstanding video. I love that you broke down the comands and made sense of it all.
Thanks, I appreciate that. Thanks for watching. Glad you enjoyed the content.
Right on Tony, this got my pihole up and running! Thanks!
Thanks Red Heelerdog! Glad the video helped you get up & running. Have a great day!
One of the best explanations on the internet. Thank you
I appreciate your feedback. Thanks for watching! Have a great day.
It would be great to get an updated version of this guide in DSM 7.2 because as far as I can tell the new Container Manager no longer supports multiple networks for a container. It doesn't have check boxes anymore but a single dropdown only allowing you to select one. Additionally when I have tried to specify multiple networks via docker compose in container manager you get an error saying "driver failed programming external connectivity on endpoint pihole".
I had the same issue but there's an easy workaround. Stop the new pihole container you created first, then head to the 'Network' section of the Container manager. Select the Network your container is missing and click on the 'Manage' button. This will open a popup menu that allows you to assign any existing containers to that particular Network. Don't forget to restart the container et Voila!
Thank you for sharing. I just learned of this workaround today as a matter of fact. Have a great day.
Thank you for making amazing content available! :) @@QuikTechSolutions
Great video Tony! I recall having issues when I first tried implementing macvlan stuff. Thank you!
Thanks Bob, much appreciated!
Thanks SUPER helpful, I now have pihole running on my synology nas - super cool
Thanks for watching & commenting Tony. Glad you found the video to be helpful. Have a great day.
Many thanks for the tutorial. Simple steps, great voice, good visualisation. Cheers
Appreciate the comment. Thanks for watching.
Worked perfectly. THANK YOU.
You’re welcome. Glad it helped.
amazing video tutorial Tony I can thank you enough!
Thanks Mac XPS! Hope you are doing well. Have a great day!
Great video. If I weren't already eyeballs deep in using Docker with Portainer, I'd definitely be giving this a try. Who knows, once I max out the RAM in my 1522+ I may still play with Docker on it.
Thanks for watching Jeremy!
Very nice video Tony - good job 😊
Thanks for watching David!
@@QuikTechSolutions No problem Tony 🙂
Everyone likes PIE !! Good video tony !
Thanks Jason.
Great response. Thank You! I'm watching :)
You’re welcome! Glad you watched it. Hope it helped. Have a great day.
@@QuikTechSolutions Finally I did it and it works! But it took me some time: First: my network interface in SSH was called "ovs_eth0". Of course I used that name while creating the macvlan network, but after following all the steps, pihole just didn't work. I checked the configuration several times (and that's why I asked you for a video). Finally I found some info that maybe (I don't know if it's true) DSM7 had a problem with VLAN support, as a test, I uninstalled "Virtual Machine Manager" and turned Open vSwitch off in DSM (so, the interface went back to eth0) then I deleted existing macvlan in docker, re-created it, attached it to eth0 and did the installation further to the end. And it works. But I don't know if there is a conflict / network problem with Docker and Virtualization station, or it is just my lack of knowledge..? Thank you anyway.
Finally made it on Ubuntu and Portainer thanks to this video!
Awesome 👏🏻 great to hear 👍🏻
I found you pihole setup on synology very helpful. Can you do another video continuing on from the end of setting up pihole to add unbound from there.
Thank you for watching. I appreciate it very much. I’m sorry but I don’t use Unbound, but I’m sure you can search TH-cam for the content you are looking for.
Excellent video tutorial, easy to follow. I'd like to add Unbounf to the setup you described. Could you make a video covering that topic?
Thanks. I don't use unbound so probably not going to happen. However, there are plenty of videos on this topic. Have a great day.
Tony, thanks for your videos; they are always very informative. In this case, I am having an issue at step #1. I cannot identify an available IP address to assign pihole that isn't already in the DHCP pool. How can I get over this hurdle? Thank you.
Thanks for watching. This is difficult for me to answer seeing I have no idea what your subnet configuration looks like. I’m assuming you’re using a /24 subnet. Are you using the entire subnet range as your DHCP pool?
thanks for this video. i was thinking about setting up a RPi device. I have vLans running on an Edgerouter X with firewall rules to limit access across the networks. I am trying to figure out how to modify the FW rules to point each VLAN to the R Pi hole DNS.
Hi Thanks for watching and commenting. If you go under the Services tab you will find your DHCP server information. Listed should be a DHCP server for each Vlan. Select a specific network to edit, then put the IP address of the PiHole in the Primary DNS field. Don’t forget to save the changes. Have a great day.
Great video and it helped me get my docker container running as a standalone IP. Two quick questions: 1) With the new version of DSM now - I cant see how I can select the new bridge network and it works without it? Am I mistaken or missing something for DSM 7.2 and 2) Do I need to make MacVLAN networks per docker container that I want to have a stand alone IP for?
Thanks for watching. I have not yet tried this on DSM7.2. I have heard that option to select the bridge network exists, I’m just not sure where it is hidden. It’s on my list to do. Have a great day.
Also exactly what i am running into.
Thx for this video. Now I understand a little better the macvlan process. Have some questions : I can't reach any adresses/domain names created with the reverse proxy ngnix. I guess this is beacause the synology using 53/443/80 ports ... Some people told me that i should create macvlan for pihole and ngnix. How to be sure that the network will choose the ports on those docker first (before the nas ..) . Just started with docker .. so sorry if my questions seems to be stupid :) ...
I have the same issue running a domain with my NAS, it using port 53.
Thank you Tony for this video, it is very clear and direct. I just updated my NAS to DSM 7.2 and "Docker" changed to "Container Manager". The problem is that when I create the container, I'm not offered to choose the networks I want to bind to my container and I haven't found a way to do it. Have you tried with "Container Manager" and do you have to solution ?
I found the solution. In "container manager", it is a bit different than docker. Once the container is created, go to network and select a network, click on manage and add the container.
Thanks for sharing the solution. I have not upgraded yet to DSM7.2. I will make a note if this. Have a great day.
3 Questions...
1. Why create a separate "bridge" network, instead of using the built-in/default "bridge" network?
2. I'm planning on using quite a few containers, so can/should the macvlan ip-range be an unused subnet of my existing LAN the synology (i.e. 192.168.0.5) is on (i.e. 192.168.0.128/28).
3. In the configuration you're describing, as long as my container is connected to both the bridge and the macvlan, should other devices on my default LAN (i.e. 192.168.0.25 or whatever) be able to reach containers on the macvlan (i.e. 192.168.168.132 or whatever)?
Great tutorial clips. Would you please do another video Pihole-Unbound on Synology DSM 7.2. Thank you!
Hi Chris, thanks for watching and commenting. Since I don’t use Unbound, the video you request is unlikely to happen. However, here’s a link to a guy who does a great explanation - th-cam.com/video/XbbziN_H71U/w-d-xo.html. Have a great day.
Here is a good one for unbound and pihole on synology. You can take what was posted here and easily extrapolate...: th-cam.com/video/nOlx10aRZjk/w-d-xo.html
I set up the bridge network to also be used by the container. How should I configure the OpenVPN connection through the Synology VPN app to use the pihole container?
To be honest, I’m not sure if this is possible.
Helpful video, but when I follow this to a T, I get errors implementing DHCP on the pihole. Do you have another version of this video including or talking about that? Would be super helpful.
Hi Brian, Thanks for watching. Can you be a little more specific, I'm not sure what you mean when you say implementing DHCP on the pihole.
@@QuikTechSolutions - You can use Pihole to act as your dhcp server rather than your router, which allows for itemized blocking by ip rather than just your router's IP. I was able to figure it out. You have to add the capability of NET_ADMIN, either in the docker compose or even through the GUI of docker.
Hi Brian, glad you got it figured out and shared the solution here so others can benefit as well. Much appreciated. Have a great day.
Is it possible to have multiple macvlans that work with my gateway? When I try to do this for another container it says only one container can use my gateway at once, so I cannot give other containers access to my LAN.
Hi David, I have not attempted this so I really can’t say.
thank you for your reply and I would like to ask you if you have time to make tutorial in detail in how to install pihole with unbound because I try to flow all your video regarding synology , pihole and unbound but I'm really confused. my device synology DS220+ DSM 7.1.1 Ram 6GB 16TB HDD it will be a grate helpful. best regards
I think you may have the wrong creator. I’ve never done a video on Synology, PiHole with Unbound.
thanks for this great explanation, I faced an error when I open the admin page it shows synology page with "Sorry, the page you are looking for is not found.", what is wrong I have done?
Thanks for watching. Did you include /admin in the URL?
yes I did but it doesn't work@@QuikTechSolutions
i tried your guide, but my nas cant access the pihole throug the bridge network, any sugestions?
How can i use both Pi-hole and nginx-proxy-manager together as one DNS?
Is it also possible to use Pi-Hole as DHCP for you whole Network using this Setup?
Hi, yes Pi-Hole can also be used as a DHCP server on your network. I’ve never configured it to be as I use the DHCP functionality built into the router.
I just set up pihole in docker on my synology. I pointed my asus router to the ip on the nas (same ip for login) but now my nas says it can't get an external ip ... pihole works and the nas works fine internally, just no ability to access the internet, bring in metadata, no external access at all. Basically it's just a one way traffic for me. How do I get this to work like normal?
Hello Stacey, not exactly sure what you mean when you say you pointed your Asus router to the NAS? After installing PiHole, all you have to do is point a web browser to the IP of the NAS to access the PiHole web page. I suspect not having Internet access has something to do with whatever you did involving your router. Undo that if you can. Good luck.
Are you able to see PiHole clients in the web interface after this setup? Synology has changed to Container Manager so this video is helpful but it's not exact in terms of the screens. Most notably, setting the container to use the macvlan and also the bridge networks is not an option. I could only choose one and used the macvlan as I don't have other containers/services where I would need to use pihole. I pointed my router to use pihole and it blocks ads - but it does not show me the clients individually - just the router.
Hey Lance, thanks for watching. Yeah, shortly after making this video Synology replaced Docker with Container Manager. Instead of pointing your router to PiHole, i want you to try something. Change your router back whatever it was before. Point just your computer to PiHole. See if it blocks ads and shows your computer as a client. If yes, then in your router, point your entire subnet to PiHole, not the entire router, just the subnet. Let me know if this helps.
@@QuikTechSolutions I have only seen clients after two changes. 1- I set the end device to use a static ip and set the dns to the pihole. Or 2- (I got help from pihole forum) they had me ssh into the container and stop the ftl service, move the ftl db, and restart the service. This helped, but only showed like 10 of my 40ish devices by IP only. I believe pihole would have recreated the ftl db after restart.
I dont want to set each device statically so my search continues.
Awesome video! Only issue I am running into is when I attempt to connect to Pihole through my browser I am getting a 404 error. Any suggestions?
Thanks for watching. Did you include the /admin at the end of the URL?
@@QuikTechSolutions I did. It connected briefly, I attempted to add URLs to the AdList and received a 500 error. Now I am back to getting a 404 error. I can connect just fine through my phone. Just not from my Mac. I’m sure it’s a simple fix I am just not thinking of.
I take that back. Now I’m getting the same error on my phone. Back to the drawing board lol
Hey Daniel, that’s strange that you connected momentarily, now you can’t. If it were me, I’d start over from stretch. Easier than trying to find the needle in the haystack. Good luck.
How can i find my subnet?
Ive found all the data i need exept for the subnet. 😑
The subnet is the network your NAS is on. For example mine is 192.168.25.0. Most home networks are 192.168.1.0. Find the IP address of your NAS, then change the last number to zero. For example if your NAS has the IP address of 192.168.10.50, your subnet is 192.168.10.0. Hope this helps.
Looks like this video is outdated. Unable to follow or make logical adjustments in DSM 7.2
Sorry to say, but you make the same miss outs like all the others. how to determine IP addresses outside the DHCP for example. This will overwhelm 99% of your audience already.
Would love to see your version of a video on the topic.
@@QuikTechSolutions pretty snarky. He's right though. There's one thing that will prevent a lot of people from accessing the admin panel even though everything's up and running
@Eric_In_SF first off, my intent wasn’t to be Snarky. It’s a frustration more than anything because a lot of time and planning goes into creating this content that we as creators put out there for all of you for free. This video is a really good video with lots of useful information, delivered in a way that is easy to follow and understand. That said, it does require a basic tech skill level. It’s very disheartening to see folks focus on & single out something that a creator missed, while overlooking all of the positives in the content. Just saying….
Secondly, and again not trying to be snarky as you put it, but if one doesn’t possess a basic tech skill level to be able to identify IP addresses outside of the DHCP pool, then one shouldn’t be attempting the concepts & processes offered in this video.
Excellent video Tony. Its exactly one of those topics that isnt covered enough on youtube. thank you for covering it so clearly!
Hello Clifford! You are most welcome. Glad you found the video helpful. Thanks for watching and commenting.