NAT and Dockercontainer


New Member

I have the following setup using a Docker environment and a Wirguard Server.

The Docker environment is composed by three Services (VPN, Service A, Service B) each with their separate image. They all share a common Docker Network.
In Addition the VPN Service runs a wireguard server (Subnet The Docker Network has the Subnet

I have no special Natting rules set. When a client ( connects to the wirguard Server endpoint ( it CAN ping as well as the secondary IP of the VPN Image But if I try to ping Service A ( or Service B ( from the Client (, Service A wants to reply directly to the Client instead of going trough the Wireguard Server.

How can I setup the network, so that the ICMP response goes over the VPN Server?


Members online

Latest posts