When I deploy Docker Compose services, I found that the Docker containers are all on one bridged linux segment; this much is expected. However, sometimes I have had problems connecting from one linux Docker Compose bridged segment to other networks on the same linux system even though ip forwarding was enabled in the linux kernel.
How does Docker isolate bridged container segments from each other?