LXC container cannot reach docker containers running in itself

[Alex-]

I'm having issues reaching my docker containers from the LXC container itself where docker is installed. This is a homelab installation.

I'm running a proxmox host v7.3.6.
On this host I have created an LXC container. Inside the LXC container I'm running several docker containers.

My docker containers are connected using a macvlan network and are availabe with a LAN IP, all docker containers have internet access.
All my LAN devices can connect to the docker containers without an issue.
Also my Proxmox host can reach the containers (verified with curl). Only the LXC container cannot connect in any way to the docker containers.
It seems like a routing issue, but I'm not a network expert... firewall is turned off.

I made sure that there is no DNS issue. You might notice there are LAN IP's in below config, these have been created as public DNS record during my investigation.
DNS resolve is working fine for the LXC container.


Below the config of my LXC

arch: amd64

cores: 8
features: mount=cifs,nesting=1
hostname: docker.xxxx.net
memory: 16384
mp0: /mnt/sda2,mp=/sda2
nameserver: 9.9.9.9
net0: name=eth0,bridge=vmbr0,gw=192.168.1.1,hwaddr=16:E1:C7:8F:71:37,ip=192.168.1.15/24,type=veth
onboot: 1
ostype: ubuntu
rootfs: local-lvm:vm-103-disk-0,mountoptions=lazytime;noatime,size=200G
searchdomain: xxxx.net
startup: order=10
swap: 8192
lxc.apparmor.profile: unconfined
lxc.cgroup.devices.allow: a

The macvlan definition:

        "Name": "macvlan",
        "Id": "ce251f3bc53108758739838f8ec2881a017fcef3affb4cce769cd2fa3c5feb39",
        "Created": "2023-01-23T17:07:06.301187109Z",
        "Scope": "local",
        "Driver": "macvlan",
        "EnableIPv6": false,
        "IPAM": {
            "Driver": "default",
            "Options": null,
            "Config": [
                {
                    "Subnet": "192.168.1.0/24",
                    "IPRange": "192.168.1.0/24",
                    "Gateway": "192.168.1.1"
                }
            ]
        },

 

[Alex-]

Let me know if you think there is info missing to get this issue resolved.