Resolution: Options A and B are correct, multiple virtual interfaces are assigned to multiple containers. Each container has its own protocol address, MAC and IP. Option C is correct, all containers use a sub-interface or VLAN interface on the network interface to access the network that the host can access. The D option is incorrect, please refer to the image below. *Macvlan is one of the features of Linux Kernel, and it is also a network solution that can be natively supported by Docker The configured container network belongs to the same LAN as the host network, and the container has the same network capabilities as the host, and cross-node container access does not require NAT. MacVLANs allow you to configure multiple virtual network interfaces to containers on a network interface or VLAN sub-interface of the host These virtual network interfaces have separate MAC addresses and IP addresses. *Macvlan requires the physical NIC to support promiscuous mode, and the container gateway is on the physical switch, which has the disadvantage of no IPAM (IP Address Mangement) and container IP Rely on manual configuration and management