title: access docker container in different subnet (bridge)
body: <p>I would like to reach container which is in another subnet (different bridge). The src and dst bridge is connected via a veth-pair.</p>
  
  <p>This is needed for a test setup in which I would like to manipulate the connection propperties (rate, latancy, etc.) between those bridges. My VMs in these bridges are able to ping each other but not the containers (either the VMs nor the other containers if they are connected to the other bridge.</p>
  
  <p>First I startet up the container without any network configuration and tried to connect their veth counterparts on the host to those bridges which i also created manualy.</p>
  
  <p>Actually I created those bridges indirect with </p>
  
  <pre><code>docker network create --subnet 192.168.1.0/26 \
    -o "com.docker.network.bridge.enable_icc"="true" \
    -o "com.docker.network.driver.mtu"="1500" \
    -o "com.docker.network.bridge.name"="br-side-a" \
    br-side-a
  docker network create --subnet 192.168.1.64/29 \
    -o "com.docker.network.bridge.enable_icc"="true" \
    -o "com.docker.network.driver.mtu"="1500" \
    -o "com.docker.network.bridge.name"="br-side-b" \
    br-side-b
  </code></pre>
  
  <p>and connected them with </p>
  
  <pre><code>ip link add dev vsidea type veth peer name vsideb
  brctl addif br-side-a vsidea
  brctl addif br-side-b vsideb
  ip addr add 192.168.1.10/26 dev vsidea
  ip addr add 192.168.1.66/29 dev vsideb
  ip link set vsidea up
  ip link set vsideb up
  </code></pre>
  
  <p>VMs that I connected to those bridges (with IPs of the connected subnets) are able to ping each other.</p>
  
  <p>My containers are startet like this:</p>
  
  <pre><code>docker run -ti --network br-side-a --ip 192.168.1.20 -p 10001:10000 --name csidea --privileged debian bash
  docker run -ti --network br-side-a --ip 192.168.1.67 -p 10001:10000 --name csideb --privileged debian bash
  </code></pre>
  
  <p>I can ping all (gateway-ips, vsidea/b, ...) on both container of each subnet but not the IPs which I assigned to those containers. Nor could the VMs reach the container IPs.</p>
  
  <p>I think docker does some routing/filtering which I must turn off but I have no idea how.</p>