TCP traffic not forwarded to docker container

The name of the pictureThe name of the pictureThe name of the pictureClash Royale CLAN TAG#URR8PPP











up vote
0
down vote

favorite












I have the following setup:



Kernel IP routing table

Destination Gateway Genmask Flags Metric Ref Use Iface
0.0.0.0 10.252.10.129 0.0.0.0 UG 100 0 0 ens192
10.252.10.128 0.0.0.0 255.255.255.224 U 100 0 0 ens192
10.252.10.176 0.0.0.0 255.255.255.248 U 100 0 0 ens224
10.252.10.224 0.0.0.0 255.255.255.248 U 100 0 0 ens256
169.254.0.0 0.0.0.0 255.255.0.0 U 1003 0 0 ens224
169.254.0.0 0.0.0.0 255.255.0.0 U 1004 0 0 ens256
172.17.0.0 0.0.0.0 255.255.0.0 U 0 0 0 docker0
192.168.128.0 0.0.0.0 255.255.255.0 U 0 0 0 br-5791d7b4168d

broadcast 10.252.10.128 dev ens192 proto kernel scope link src 10.252.10.137 
local 10.252.10.137 dev ens192 proto kernel scope host src 10.252.10.137 
broadcast 10.252.10.159 dev ens192 proto kernel scope link src 10.252.10.137 

broadcast 10.252.10.176 dev ens224 proto kernel scope link src 10.252.10.180 
local 10.252.10.180 dev ens224 proto kernel scope host src 10.252.10.180 
broadcast 10.252.10.183 dev ens224 proto kernel scope link src 10.252.10.180 

broadcast 10.252.10.224 dev ens256 proto kernel scope link src 10.252.10.225 
local 10.252.10.225 dev ens256 proto kernel scope host src 10.252.10.225 
broadcast 10.252.10.231 dev ens256 proto kernel scope link src 10.252.10.225 

broadcast 127.0.0.0 dev lo proto kernel scope link src 127.0.0.1 
local 127.0.0.0/8 dev lo proto kernel scope host src 127.0.0.1 
local 127.0.0.1 dev lo proto kernel scope host src 127.0.0.1 

broadcast 127.255.255.255 dev lo proto kernel scope link src 127.0.0.1 
broadcast 172.17.0.0 dev docker0 proto kernel scope link src 172.17.0.1 
local 172.17.0.1 dev docker0 proto kernel scope host src 172.17.0.1 
broadcast 172.17.255.255 dev docker0 proto kernel scope link src 172.17.0.1 

broadcast 192.168.128.0 dev br-5791d7b4168d proto kernel scope link src 192.168.128.1 
local 192.168.128.1 dev br-5791d7b4168d proto kernel scope host src 192.168.128.1 
broadcast 192.168.128.255 dev br-5791d7b4168d proto kernel scope link src 192.168.128.1


IPTABLES



Chain DOCKER (2 references)
 pkts bytes target prot opt in out source destination 
 13 780 RETURN all -- br-5791d7b4168d * 0.0.0.0/0 0.0.0.0/0 
 0 0 RETURN all -- docker0 * 0.0.0.0/0 0.0.0.0/0 
 0 0 RETURN all -- br-4e9812a44531 * 0.0.0.0/0 0.0.0.0/0 
 0 0 DNAT tcp -- !br-5791d7b4168d * 0.0.0.0/0 0.0.0.0/0 tcp dpt:20443 to:192.168.128.3:9443
 1 60 DNAT tcp -- !br-5791d7b4168d * 0.0.0.0/0 0.0.0.0/0 tcp dpt:28444 to:192.168.128.3:8444
 281 15112 DNAT tcp -- !br-5791d7b4168d * 0.0.0.0/0 0.0.0.0/0 tcp dpt:28443 to:192.168.128.3:8443


If I send a request on ens224 the traffic is not forwarded to the docker container. It reaches the server but it's not forwarded.

If I send the same request from the local server then the request reaches docker.



Any idea on how to debug this?

I used tcpdump to track the traffic and the request reaches the server.




rhel




share|improve this question

























    up vote
    0
    down vote

    favorite












    I have the following setup:



    Kernel IP routing table

    Destination Gateway Genmask Flags Metric Ref Use Iface
    0.0.0.0 10.252.10.129 0.0.0.0 UG 100 0 0 ens192
    10.252.10.128 0.0.0.0 255.255.255.224 U 100 0 0 ens192
    10.252.10.176 0.0.0.0 255.255.255.248 U 100 0 0 ens224
    10.252.10.224 0.0.0.0 255.255.255.248 U 100 0 0 ens256
    169.254.0.0 0.0.0.0 255.255.0.0 U 1003 0 0 ens224
    169.254.0.0 0.0.0.0 255.255.0.0 U 1004 0 0 ens256
    172.17.0.0 0.0.0.0 255.255.0.0 U 0 0 0 docker0
    192.168.128.0 0.0.0.0 255.255.255.0 U 0 0 0 br-5791d7b4168d

    broadcast 10.252.10.128 dev ens192 proto kernel scope link src 10.252.10.137 
    local 10.252.10.137 dev ens192 proto kernel scope host src 10.252.10.137 
    broadcast 10.252.10.159 dev ens192 proto kernel scope link src 10.252.10.137 

    broadcast 10.252.10.176 dev ens224 proto kernel scope link src 10.252.10.180 
    local 10.252.10.180 dev ens224 proto kernel scope host src 10.252.10.180 
    broadcast 10.252.10.183 dev ens224 proto kernel scope link src 10.252.10.180 

    broadcast 10.252.10.224 dev ens256 proto kernel scope link src 10.252.10.225 
    local 10.252.10.225 dev ens256 proto kernel scope host src 10.252.10.225 
    broadcast 10.252.10.231 dev ens256 proto kernel scope link src 10.252.10.225 

    broadcast 127.0.0.0 dev lo proto kernel scope link src 127.0.0.1 
    local 127.0.0.0/8 dev lo proto kernel scope host src 127.0.0.1 
    local 127.0.0.1 dev lo proto kernel scope host src 127.0.0.1 

    broadcast 127.255.255.255 dev lo proto kernel scope link src 127.0.0.1 
    broadcast 172.17.0.0 dev docker0 proto kernel scope link src 172.17.0.1 
    local 172.17.0.1 dev docker0 proto kernel scope host src 172.17.0.1 
    broadcast 172.17.255.255 dev docker0 proto kernel scope link src 172.17.0.1 

    broadcast 192.168.128.0 dev br-5791d7b4168d proto kernel scope link src 192.168.128.1 
    local 192.168.128.1 dev br-5791d7b4168d proto kernel scope host src 192.168.128.1 
    broadcast 192.168.128.255 dev br-5791d7b4168d proto kernel scope link src 192.168.128.1


    IPTABLES



    Chain DOCKER (2 references)
     pkts bytes target prot opt in out source destination 
     13 780 RETURN all -- br-5791d7b4168d * 0.0.0.0/0 0.0.0.0/0 
     0 0 RETURN all -- docker0 * 0.0.0.0/0 0.0.0.0/0 
     0 0 RETURN all -- br-4e9812a44531 * 0.0.0.0/0 0.0.0.0/0 
     0 0 DNAT tcp -- !br-5791d7b4168d * 0.0.0.0/0 0.0.0.0/0 tcp dpt:20443 to:192.168.128.3:9443
     1 60 DNAT tcp -- !br-5791d7b4168d * 0.0.0.0/0 0.0.0.0/0 tcp dpt:28444 to:192.168.128.3:8444
     281 15112 DNAT tcp -- !br-5791d7b4168d * 0.0.0.0/0 0.0.0.0/0 tcp dpt:28443 to:192.168.128.3:8443


    If I send a request on ens224 the traffic is not forwarded to the docker container. It reaches the server but it's not forwarded.

    If I send the same request from the local server then the request reaches docker.



    Any idea on how to debug this?

    I used tcpdump to track the traffic and the request reaches the server.




    rhel




    share|improve this question























      up vote
      0
      down vote

      favorite









      up vote
      0
      down vote

      favorite











      I have the following setup:



      Kernel IP routing table

      Destination Gateway Genmask Flags Metric Ref Use Iface
      0.0.0.0 10.252.10.129 0.0.0.0 UG 100 0 0 ens192
      10.252.10.128 0.0.0.0 255.255.255.224 U 100 0 0 ens192
      10.252.10.176 0.0.0.0 255.255.255.248 U 100 0 0 ens224
      10.252.10.224 0.0.0.0 255.255.255.248 U 100 0 0 ens256
      169.254.0.0 0.0.0.0 255.255.0.0 U 1003 0 0 ens224
      169.254.0.0 0.0.0.0 255.255.0.0 U 1004 0 0 ens256
      172.17.0.0 0.0.0.0 255.255.0.0 U 0 0 0 docker0
      192.168.128.0 0.0.0.0 255.255.255.0 U 0 0 0 br-5791d7b4168d

      broadcast 10.252.10.128 dev ens192 proto kernel scope link src 10.252.10.137 
      local 10.252.10.137 dev ens192 proto kernel scope host src 10.252.10.137 
      broadcast 10.252.10.159 dev ens192 proto kernel scope link src 10.252.10.137 

      broadcast 10.252.10.176 dev ens224 proto kernel scope link src 10.252.10.180 
      local 10.252.10.180 dev ens224 proto kernel scope host src 10.252.10.180 
      broadcast 10.252.10.183 dev ens224 proto kernel scope link src 10.252.10.180 

      broadcast 10.252.10.224 dev ens256 proto kernel scope link src 10.252.10.225 
      local 10.252.10.225 dev ens256 proto kernel scope host src 10.252.10.225 
      broadcast 10.252.10.231 dev ens256 proto kernel scope link src 10.252.10.225 

      broadcast 127.0.0.0 dev lo proto kernel scope link src 127.0.0.1 
      local 127.0.0.0/8 dev lo proto kernel scope host src 127.0.0.1 
      local 127.0.0.1 dev lo proto kernel scope host src 127.0.0.1 

      broadcast 127.255.255.255 dev lo proto kernel scope link src 127.0.0.1 
      broadcast 172.17.0.0 dev docker0 proto kernel scope link src 172.17.0.1 
      local 172.17.0.1 dev docker0 proto kernel scope host src 172.17.0.1 
      broadcast 172.17.255.255 dev docker0 proto kernel scope link src 172.17.0.1 

      broadcast 192.168.128.0 dev br-5791d7b4168d proto kernel scope link src 192.168.128.1 
      local 192.168.128.1 dev br-5791d7b4168d proto kernel scope host src 192.168.128.1 
      broadcast 192.168.128.255 dev br-5791d7b4168d proto kernel scope link src 192.168.128.1


      IPTABLES



      Chain DOCKER (2 references)
       pkts bytes target prot opt in out source destination 
       13 780 RETURN all -- br-5791d7b4168d * 0.0.0.0/0 0.0.0.0/0 
       0 0 RETURN all -- docker0 * 0.0.0.0/0 0.0.0.0/0 
       0 0 RETURN all -- br-4e9812a44531 * 0.0.0.0/0 0.0.0.0/0 
       0 0 DNAT tcp -- !br-5791d7b4168d * 0.0.0.0/0 0.0.0.0/0 tcp dpt:20443 to:192.168.128.3:9443
       1 60 DNAT tcp -- !br-5791d7b4168d * 0.0.0.0/0 0.0.0.0/0 tcp dpt:28444 to:192.168.128.3:8444
       281 15112 DNAT tcp -- !br-5791d7b4168d * 0.0.0.0/0 0.0.0.0/0 tcp dpt:28443 to:192.168.128.3:8443


      If I send a request on ens224 the traffic is not forwarded to the docker container. It reaches the server but it's not forwarded.

      If I send the same request from the local server then the request reaches docker.



      Any idea on how to debug this?

      I used tcpdump to track the traffic and the request reaches the server.




      rhel




      share|improve this question













      I have the following setup:



      Kernel IP routing table

      Destination Gateway Genmask Flags Metric Ref Use Iface
      0.0.0.0 10.252.10.129 0.0.0.0 UG 100 0 0 ens192
      10.252.10.128 0.0.0.0 255.255.255.224 U 100 0 0 ens192
      10.252.10.176 0.0.0.0 255.255.255.248 U 100 0 0 ens224
      10.252.10.224 0.0.0.0 255.255.255.248 U 100 0 0 ens256
      169.254.0.0 0.0.0.0 255.255.0.0 U 1003 0 0 ens224
      169.254.0.0 0.0.0.0 255.255.0.0 U 1004 0 0 ens256
      172.17.0.0 0.0.0.0 255.255.0.0 U 0 0 0 docker0
      192.168.128.0 0.0.0.0 255.255.255.0 U 0 0 0 br-5791d7b4168d

      broadcast 10.252.10.128 dev ens192 proto kernel scope link src 10.252.10.137 
      local 10.252.10.137 dev ens192 proto kernel scope host src 10.252.10.137 
      broadcast 10.252.10.159 dev ens192 proto kernel scope link src 10.252.10.137 

      broadcast 10.252.10.176 dev ens224 proto kernel scope link src 10.252.10.180 
      local 10.252.10.180 dev ens224 proto kernel scope host src 10.252.10.180 
      broadcast 10.252.10.183 dev ens224 proto kernel scope link src 10.252.10.180 

      broadcast 10.252.10.224 dev ens256 proto kernel scope link src 10.252.10.225 
      local 10.252.10.225 dev ens256 proto kernel scope host src 10.252.10.225 
      broadcast 10.252.10.231 dev ens256 proto kernel scope link src 10.252.10.225 

      broadcast 127.0.0.0 dev lo proto kernel scope link src 127.0.0.1 
      local 127.0.0.0/8 dev lo proto kernel scope host src 127.0.0.1 
      local 127.0.0.1 dev lo proto kernel scope host src 127.0.0.1 

      broadcast 127.255.255.255 dev lo proto kernel scope link src 127.0.0.1 
      broadcast 172.17.0.0 dev docker0 proto kernel scope link src 172.17.0.1 
      local 172.17.0.1 dev docker0 proto kernel scope host src 172.17.0.1 
      broadcast 172.17.255.255 dev docker0 proto kernel scope link src 172.17.0.1 

      broadcast 192.168.128.0 dev br-5791d7b4168d proto kernel scope link src 192.168.128.1 
      local 192.168.128.1 dev br-5791d7b4168d proto kernel scope host src 192.168.128.1 
      broadcast 192.168.128.255 dev br-5791d7b4168d proto kernel scope link src 192.168.128.1


      IPTABLES



      Chain DOCKER (2 references)
       pkts bytes target prot opt in out source destination 
       13 780 RETURN all -- br-5791d7b4168d * 0.0.0.0/0 0.0.0.0/0 
       0 0 RETURN all -- docker0 * 0.0.0.0/0 0.0.0.0/0 
       0 0 RETURN all -- br-4e9812a44531 * 0.0.0.0/0 0.0.0.0/0 
       0 0 DNAT tcp -- !br-5791d7b4168d * 0.0.0.0/0 0.0.0.0/0 tcp dpt:20443 to:192.168.128.3:9443
       1 60 DNAT tcp -- !br-5791d7b4168d * 0.0.0.0/0 0.0.0.0/0 tcp dpt:28444 to:192.168.128.3:8444
       281 15112 DNAT tcp -- !br-5791d7b4168d * 0.0.0.0/0 0.0.0.0/0 tcp dpt:28443 to:192.168.128.3:8443


      If I send a request on ens224 the traffic is not forwarded to the docker container. It reaches the server but it's not forwarded.

      If I send the same request from the local server then the request reaches docker.



      Any idea on how to debug this?

      I used tcpdump to track the traffic and the request reaches the server.





      rhel





      share|improve this question












      share|improve this question




      share|improve this question








      edited Jun 22 at 12:52









      Thomas

      3,38941023




      3,38941023









      asked Jun 22 at 11:44









      Catalin

      13




      13

























          active

          oldest

          votes











          Your Answer







          StackExchange.ready(function()
          var channelOptions =
          tags: "".split(" "),
          id: "106"
          ;
          initTagRenderer("".split(" "), "".split(" "), channelOptions);

          StackExchange.using("externalEditor", function()
          // Have to fire editor after snippets, if snippets enabled
          if (StackExchange.settings.snippets.snippetsEnabled)
          StackExchange.using("snippets", function()
          createEditor();
          );

          else
          createEditor();

          );

          function createEditor()
          StackExchange.prepareEditor(
          heartbeatType: 'answer',
          convertImagesToLinks: false,
          noModals: false,
          showLowRepImageUploadWarning: true,
          reputationToPostImages: null,
          bindNavPrevention: true,
          postfix: "",
          onDemand: true,
          discardSelector: ".discard-answer"
          ,immediatelyShowMarkdownHelp:true
          );



          );








           

          draft saved


          draft discarded


















          StackExchange.ready(
          function ()
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f451284%2ftcp-traffic-not-forwarded-to-docker-container%23new-answer', 'question_page');

          );

          Post as a guest






















          active

          oldest

          votes













          active

          oldest

          votes









          active

          oldest

          votes






          active

          oldest

          votes










           

          draft saved


          draft discarded


























           


          draft saved


          draft discarded














          StackExchange.ready(
          function ()
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f451284%2ftcp-traffic-not-forwarded-to-docker-container%23new-answer', 'question_page');

          );

          Post as a guest
































































          -

          Popular posts from this blog

          Peggy Mitchell

          Image
          EastEnders character This article is about the soap opera character. For the British tennis player, see Peggy Michell. For the author, see Margaret Mitchell. Peggy Mitchell Barbara Windsor as Peggy Mitchell (2008) EastEnders character Portrayed by Jo Warne (1991) Barbara Windsor (1994–2016) Duration 1991, 1994–2010, 2013–2016 First appearance Episode 650 30 April 1991  ( 1991-04-30 ) Last appearance Episode 5286 17 May 2016  ( 2016-05-17 ) (appearance) Episode 5287 19 May 2016 (voiceover) Introduced by Michael Ferguson (1991) Barbara Emile (1994) Louise Berridge (2004) Kate Harwood (2005) Lorraine Newman (2013) Dominic Treadwell-Collins (2014) Spin-off appearances The Mitchells - Naked Truths (1998) Classification Former; regular Profile Other names Peggy Butcher Occupation Barmaid Businesswoman Pub landlady Jo Warne as Peggy Mitchell (1991) Family Family Mitchell Father Jack Martin Mother Lily Martin Sisters Aunt ...
          Read more

          Palaiologos

          Image
          Palaiologos Παλαιολόγος Palaeologus, Palaeologue Imperial Family Double-headed eagle with the family cypher Country Byzantine Empire, Duchy of Montferrat (remaining lineage after Empire annexed by Ottomans) Founded 11th century  ( 11th century ) Founder Nikephoros Palaiologos (first known) Final ruler Constantine XI Palaiologos (Byzantine Empire) Margaret Paleologa (Montferrat) Titles Byzantine Emperor Marquess of Montferrat Style(s) "Augustus" "Basileus" "Autokrator" Traditions Greek Orthodoxy (predominantly) Roman Catholicism (remaining lineage in Montferrat) Dissolution 1533  ( 1533 ) Cadet branches Claimants: House of Kastrioti (defunct) House of Rurik (defunct) Palaiologan dynasty Chronology Michael VIII 1259–1282 with Andronikos II as co-emperor, 1261–1282 Andronikos II 1282–1328 with Michael IX (1294–1320) and Andronikos III (1321–1328) as co-emperors Andronikos III 1328–1341 John...
          Read more

          The Forum (Inglewood, California)

          Image
          The Forum "LA Forum" Prairie Ave. façade of The Forum in 2014 Full name The Forum, presented by Chase Former names The Forum (1967–1988) Great Western Forum (1988–2003) Address 3900 W. Manchester Blvd Location Inglewood, California Coordinates Coordinates: 33°57′29″N 118°20′31″W  /  33.95806°N 118.34194°W  / 33.95806; -118.34194 Public transit     Downtown Inglewood station Owner The Madison Square Garden Company Operator MSG Entertainment Seating type Reserved Capacity 17,500 Half-bowl: 8,000 Construction Broke ground July 1, 1966  ( 1966-07-01 ) Opened December 30, 1967  ( 1967-12-30 ) Renovated 1988, 2012–2014 Construction cost $16 million Renovation: 2014: $76.5 million Architect Charles Luckman Associates (original) Brisbin Brook Beynon (renovation) Structural engineer Johnson & Nielsen Associates (original) Severud Associates (renovation) Genera...
          Read more