Debian+小米路由器，经常网关消失，ping不通ipv4外网

mxdyeah

首先可以100%肯定与Docker有关，我的现象是oryx容器重启就会出现这样的情况，目前未知原因，正在排查，感谢各位小伙伴啦！

root@MXD-PC-3:~# route
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         0.0.0.0         255.255.255.255 UH    0      0        0 veth81b2185
default         0.0.0.0         0.0.0.0         U     0      0        0 veth81b2185
default         XiaoQiang       0.0.0.0         UG    0      0        0 enp2s0
link-local      0.0.0.0         255.255.0.0     U     0      0        0 veth81b2185
172.17.1.0      0.0.0.0         255.255.255.0   U     0      0        0 enp2s0
XiaoQiang       0.0.0.0         255.255.255.255 UH    0      0        0 enp2s0
192.168.53.0    0.0.0.0         255.255.255.0   U     0      0        0 docker0
root@MXD-PC-3:~# ping www.baidu.com
PING www.baidu.com(240e:ff:e020:9ae:0:ff:b014:8e8b (240e:ff:e020:9ae:0:ff:b014:8e8b)) 56 data bytes
64 bytes from 240e:ff:e020:9ae:0:ff:b014:8e8b (240e:ff:e020:9ae:0:ff:b014:8e8b): icmp_seq=1 ttl=48 time=33.8 ms
64 bytes from 240e:ff:e020:9ae:0:ff:b014:8e8b (240e:ff:e020:9ae:0:ff:b014:8e8b): icmp_seq=2 ttl=48 time=33.0 ms
^C
--- www.baidu.com ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1002ms
rtt min/avg/max/mdev = 32.971/33.366/33.761/0.395 ms
root@MXD-PC-3:~# ping www.baidu.com -4
PING (183.2.172.42) 56(84) bytes of data.
From 169.254.187.2 icmp_seq=1 Destination Host Unreachable
From 169.254.187.2 icmp_seq=2 Destination Host Unreachable
From 169.254.187.2 icmp_seq=3 Destination Host Unreachable
From 169.254.187.2 icmp_seq=4 Destination Host Unreachable
From 169.254.187.2 icmp_seq=5 Destination Host Unreachable
From 169.254.187.2 icmp_seq=6 Destination Host Unreachable
From 169.254.187.2 icmp_seq=7 Destination Host Unreachable
^C
--- 183.2.172.42 ping statistics ---
7 packets transmitted, 0 received, +7 errors, 100% packet loss, time 6103ms
pipe 4
root@MXD-PC-3:~# route add default gw 172.17.1.4 enp2s0
SIOCADDRT: File exists
root@MXD-PC-3:~# route del default gw 172.17.1.4 enp2s0
root@MXD-PC-3:~# route add default gw 172.17.1.4 enp2s0
root@MXD-PC-3:~# route
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         0.0.0.0         255.255.255.255 UH    0      0        0 veth81b2185
default         XiaoQiang       0.0.0.0         UG    0      0        0 enp2s0
default         0.0.0.0         0.0.0.0         U     0      0        0 veth81b2185
link-local      0.0.0.0         255.255.0.0     U     0      0        0 veth81b2185
172.17.1.0      0.0.0.0         255.255.255.0   U     0      0        0 enp2s0
XiaoQiang       0.0.0.0         255.255.255.255 UH    0      0        0 enp2s0
192.168.53.0    0.0.0.0         255.255.255.0   U     0      0        0 docker0
root@MXD-PC-3:~# ping 114.114.114.114
PING 114.114.114.114 (114.114.114.114) 56(84) bytes of data.
64 bytes from 114.114.114.114: icmp_seq=1 ttl=49 time=41.7 ms
64 bytes from 114.114.114.114: icmp_seq=2 ttl=49 time=41.8 ms
^C
--- 114.114.114.114 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1001ms
rtt min/avg/max/mdev = 41.689/41.760/41.832/0.071 ms
root@MXD-PC-3:~# route
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         0.0.0.0         255.255.255.255 UH    0      0        0 veth81b2185
default         XiaoQiang       0.0.0.0         UG    0      0        0 enp2s0
default         0.0.0.0         0.0.0.0         U     0      0        0 veth81b2185
link-local      0.0.0.0         255.255.0.0     U     0      0        0 veth81b2185
172.17.1.0      0.0.0.0         255.255.255.0   U     0      0        0 enp2s0
XiaoQiang       0.0.0.0         255.255.255.255 UH    0      0        0 enp2s0
192.168.53.0    0.0.0.0         255.255.255.0   U     0      0        0 docker0

具体的表现情况就是上面的bash记录，服务器ip为172.17.1.22，网关在172.17.1.4，小米路由器，这里为XiaoQiang。
没有进行删除网关再重新添加的操作前，可以ping通ipv6，不能ping通ipv4，需要删除网关再重新添加才能ping通ipv4
怀疑是不是跟“XiaoQiang”这个设备名字有关？另一台电脑也是这样的状况，未装任何第三方插件及网络管理器，另外贴上/etc/network/interfaces

root@MXD-PC-3:~# cat /etc/network/interfaces

# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).

source /etc/network/interfaces.d/*

# The loopback network interface
auto lo
iface lo inet loopback

# The primary network interface
allow-hotplug enp2s0
iface enp2s0 inet dhcp
  hostname MXD-PC-3
iface enp2s0 inet6 auto
  hostname MXD-PC-3

已配置DHCP静态IPv4
路由器配置

mxdyeah

容器内

root@7eb8e5c493b0:/usr/local/oryx/platform# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
8: eth0@if9: <BROADCAST,MULTICAST,DYNAMIC,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default 
    link/ether 02:42:c0:a8:35:02 brd ff:ff:ff:ff:ff:ff link-netnsid 0
    inet 192.168.53.2/24 brd 192.168.53.255 scope global eth0
       valid_lft forever preferred_lft forever
root@7eb8e5c493b0:/usr/local/oryx/platform# cat /etc/resolv.conf
# Generated by Docker Engine.
# This file can be edited; Docker Engine will not make further changes once it
# has been modified.

nameserver 172.17.1.4  ## 这个就是我路由器ip哈

# Based on host file: '/etc/resolv.conf' (legacy)
# Overrides: []
root@7eb8e5c493b0:/usr/local/oryx/platform# ip route
default via 192.168.53.1 dev eth0 
192.168.53.0/24 dev eth0 proto kernel scope link src 192.168.53.2

mxdyeah

宿主机

root@MXD-PC-3:~# ifconfig
docker0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 192.168.53.1  netmask 255.255.255.0  broadcast 192.168.53.255
        inet6 fe80::42:b4ff:fe2b:40f1  prefixlen 64  scopeid 0x20<link>
        ether 02:42:b4:2b:40:f1  txqueuelen 0  (Ethernet)
        RX packets 5309  bytes 3435354 (3.2 MiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 5709  bytes 4015130 (3.8 MiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

enp2s0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 172.17.1.22  netmask 255.255.255.0  broadcast 172.17.1.255
        inet6 2409:8a60码住::22  prefixlen 64  scopeid 0x0<global>
        inet6 2409:8a60:码住::177  prefixlen 64  scopeid 0x0<global>
        inet6 fe80::2e0:码住05  prefixlen 64  scopeid 0x20<link>
        inet6 2409:8a60:码住:6b05  prefixlen 64  scopeid 0x0<global>
        ether 00:e0:4c:58:6b:05  txqueuelen 1000  (Ethernet)
        RX packets 6814064  bytes 6177692002 (5.7 GiB)
        RX errors 0  dropped 2  overruns 0  frame 0
        TX packets 5219321  bytes 4827387237 (4.4 GiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536
        inet 127.0.0.1  netmask 255.0.0.0
        inet6 ::1  prefixlen 128  scopeid 0x10<host>
        loop  txqueuelen 1000  (Local Loopback)
        RX packets 23103  bytes 4224573 (4.0 MiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 23103  bytes 4224573 (4.0 MiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

veth81b2185: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 169.254.187.2  netmask 255.255.0.0  broadcast 169.254.255.255
        inet6 fe80::b0b6:7fff:fe41:ac0b  prefixlen 64  scopeid 0x20<link>
        ether b2:b6:7f:41:ac:0b  txqueuelen 0  (Ethernet)
        RX packets 3019  bytes 1782815 (1.7 MiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 3682  bytes 877513 (856.9 KiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

Docker配置

root@MXD-PC-3:~# docker network inspect bridge
[
    {
        "Name": "bridge",
        "Id": "022816b2096aa1fd8d81dc2c1e47aaa3493d65764b144f3c5a3ea51b8a484c48",
        "Created": "2024-08-19T15:48:42.796941312+08:00",
        "Scope": "local",
        "Driver": "bridge",
        "EnableIPv6": false,
        "IPAM": {
            "Driver": "default",
            "Options": null,
            "Config": [
                {
                    "Subnet": "192.168.53.0/24",
                    "Gateway": "192.168.53.1"
                }
            ]
        },
        "Internal": false,
        "Attachable": false,
        "Ingress": false,
        "ConfigFrom": {
            "Network": ""
        },
        "ConfigOnly": false,
        "Containers": {
            "7eb8e5c493b096009cf22d04cc693c2af8a0e4787ccc95f51bcedb47ec494a5b": {
                "Name": "oryx",
                "EndpointID": "a1822693da548b4ef0d028e9154fa1fa9d516c32f59aaf559eacafa8270c7db6",
                "MacAddress": "02:42:c0:a8:35:02",
                "IPv4Address": "192.168.53.2/24",
                "IPv6Address": ""
            }
        },
        "Options": {
            "com.docker.network.bridge.default_bridge": "true",
            "com.docker.network.bridge.enable_icc": "true",
            "com.docker.network.bridge.enable_ip_masquerade": "true",
            "com.docker.network.bridge.host_binding_ipv4": "0.0.0.0",
            "com.docker.network.bridge.name": "docker0",
            "com.docker.network.driver.mtu": "1500"
        },
        "Labels": {}
    }
]

/etc/docker/daemon.json

{
  "registry-mirrors": [
    "https://docker.mxdyeah.top"
  ],
  "bip":"192.168.53.1/24"
}

mxdyeah

root@MXD-PC-3:~# iptables -t nat -L

# Warning: iptables-legacy tables present, use iptables-legacy to see them
Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination         
DOCKER     all  --  anywhere             anywhere             ADDRTYPE match dst-type LOCAL

Chain INPUT (policy ACCEPT)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         
DOCKER     all  --  anywhere            !127.0.0.0/8          ADDRTYPE match dst-type LOCAL

Chain POSTROUTING (policy ACCEPT)
target     prot opt source               destination         
MASQUERADE  all  --  192.168.53.0/24      anywhere            
MASQUERADE  tcp  --  192.168.53.2         192.168.53.2         tcp dpt:1935
MASQUERADE  tcp  --  192.168.53.2         192.168.53.2         tcp dpt:2022
MASQUERADE  tcp  --  192.168.53.2         192.168.53.2         tcp dpt:2443
MASQUERADE  udp  --  192.168.53.2         192.168.53.2         udp dpt:8000
MASQUERADE  udp  --  192.168.53.2         192.168.53.2         udp dpt:10080

Chain DOCKER (2 references)
target     prot opt source               destination         
RETURN     all  --  anywhere             anywhere            
DNAT       tcp  --  anywhere             anywhere             tcp dpt:1935 to:192.168.53.2:1935
DNAT       tcp  --  anywhere             anywhere             tcp dpt:2022 to:192.168.53.2:2022
DNAT       tcp  --  anywhere             anywhere             tcp dpt:2443 to:192.168.53.2:2443
DNAT       udp  --  anywhere             anywhere             udp dpt:8000 to:192.168.53.2:8000
DNAT       udp  --  anywhere             anywhere             udp dpt:10080 to:192.168.53.2:10080