docker 互相访问出现 No route to host

[size=x-large]
同一台VM上启动多个docker , docker之间互相访问出现 error No route to host,
解决办法如下

firewall-cmd --permanent --direct --add-rule ipv4 filter INPUT 4 -i docker0 -j ACCEPT
firewall-cmd --reload
systemctl restart docker

原理： 默认情况下，firewalld将阻止同一个docker主机上的intercontainer网络，允许docker容器之间的通信，必须调整防火墙策略。

from https://support.onegini.com/hc/en-us/articles/115000769311-Firewalld-error-with-Docker-No-route-to-host-
[/size]