I have a Unraid server with two NICs. Interface eth0 is set to LAN on subnet 192.168.1.0/24 and eth1 set to a VLAN (4) on subnet 17.16.100.0/24. In Docker settings I have IPv4 custom network set to interface br1.4 (eh1's bridge). To test I have all firewall traffic for the interface dedicated to VLAN 4 blocked. But if run one of the docker containers interactively in console and test a curl I can still hit the web. However, if I block the 192.168.1.0/24 assigned IP address on my firewall, the same curl will not go through. I have turned off bonding and I am sure docker is only set to use b1.4. Although the internal IP for the docker container is outside the subnet (17.17.0.2), but i assume that is normal. Maybe I am misunderstanding something about how docker networks work. If anyone could help with any leads, it would be appreciated.