I have a docker cluster with an OpenVPN container as an access server and a dns container as a forwarder. All containers are connected to a docker overlay network called vpn, but some run as a docker swarm stack and others are running independently from swarm.

An OpenVPN client can connect and use dns to resolve internal containers names, I had to add an iptables masquerade rule to achieve this, but can't ping containers in stack despite being accessible from OpenVPN container. I've checked iptables rules and routing tables and couldn't figure out why it returns host unreachable while trying to ping a stack service from an OpenVPN client.

enter image description here

  • I had almost exactly the same problem: "regular" containers were reachable but stack containers were not. For me the problem was fixed by setting the network_mode to "bridge" for the containers in the stack. – Niko Jan 18 at 7:43

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.