docs: clarify that --data-path-addr doesn't restrict access

Signed-off-by: David Karlsson <[email protected]> (cherry picked from commit faf096b) Signed-off-by: David Karlsson <[email protected]>
docker · May 13, 2024 · 81b482e · 81b482e
1 parent 211e74b
commit 81b482e
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/docs/reference/commandline/swarm_init.md b/docs/reference/commandline/swarm_init.md
@@ -117,6 +117,12 @@ data traffic from the management traffic of the cluster.
 
 If unspecified, the IP address or interface of the advertise address is used.
 
+Setting `--data-path-addr` does not restrict which interfaces or source IP
+addresses the VXLAN socket is bound to. Similar to `--advertise-addr`, the
+purpose of this flag is to inform other members of the swarm about which
+address to use for control plane traffic. To restrict access to the VXLAN port
+of the node, use firewall rules.
+
 ### <a name="data-path-port"></a> Configure port number for data traffic (--data-path-port)
 
 The `--data-path-port` flag allows you to configure the UDP port number to use