Docker Containers unable to reach Internet

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

Docker Containers unable to reach Internet

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
Docker Containers unable to reach Internet
Docker Containers unable to reach Internet
2023-06-30 06:46:57
Tags: #docker
Model: Archer AX10  
Hardware Version: V1
Firmware Version: 1.3.4 Build 20230220 Rel. 71494(5553)

Hi there, I have several Docker containers set up in the IP VLAN L3 Mode for isolation purposes with the network name l3vlan.

 

My Docker host has an IP of 192.168.2.30 and the IP VLAN subnets are:

 

  • 192.168.200.0/24
  • 192.168.210.0/24
  • 192.168.220.0/24

 

Testing with an alpine image with `docker run -it --rm --network=l3vlan --name alpinetest alpine` and pinging 8.8.8.8 returns nothing, no response.

Performing traceroute I get the following:

 

traceroute to 8.8.8.8 (8.8.8.8), 30 hops max, 46 byte packets
 1  192.168.2.1 (192.168.2.1)  0.255 ms  0.189 ms  0.161 ms
 2  *  *  *
 3  *  *  *
 4  *  *  *
 5  *  *  *
 ...

Looking at the traceroute result, it seems that the packet stopped at router, so I tried debugging on the router.

Strangely enough, when I head to Security -> Firewall and toggle SPI Firewall or Respond to Pings from WAN to either on or off to let the configuration/service restart, I get intermittent ping results but once I rerun the ping command, it failed again.

 

Also, I have already set up the routes as required as shown below.

 

May I ask what kind of security feature or bug is blocking this request/response?

I would like my containers in L3 VLAN to be able to connect to Internet for various purposes while fulfilling isolation.

 

Thanks!

  0      
  0      
#1
Options
2 Reply
Re:Docker Containers unable to reach Internet
2023-07-03 07:00:36

  @jerrioboi 

 

Could you please provide a detailed network topology including IP address of each device? 

 

The docker containers are connected to a L3 switch with different VLAN networks, right? is the switch a TP-Link switch as well? or a different brand?

Nice to Meet You in Our TP-Link Community. Check Out the Latest Posts: Archer GE550 - BE9300 Tri-Band Wi-Fi 7 Gaming Router EasyMesh Is Available When Wi-Fi Routers Work in AP Mode as A Controller. Archer BE550 New Software Enhances System Stability and Optimizes MLO Network Stability. TL-WA3001 Supports EasyMesh, Speed Limit, Guest Network in AP Mode and/or Multi-SSID Mode. If you found the post or response helpful, please click Helpful. If an answer solves your problem, click "Recommended Solution" so that others can benefit from it.
  0  
  0  
#2
Options
Re:Docker Containers unable to reach Internet
2023-07-03 08:14:01 - last edited 2023-07-03 08:15:52

Hello @Sunshine , thank you for your response.

 

There is no other devices in the topology other than an Archer AX10 router and my running server.

 

The following is the topology diagram:

 

I would like to clarify also that the subnets 192.168.200.0/24, 192.168.210.0/24 and 192.168.220.0/24 are created using Docker's IPVLAN network in L3 mode.

I.e.:

docker network create -d ipvlan \
-o parent=eno1 -o ipvlan_mode=l3 \
--subnet 192.168.200.0/24 \
--subnet 192.168.210.0/24 \
--subnet 192.168.220.0/24 \
l3vlan

  0  
  0  
#3
Options