Docker Compose: Use static and dynamic network interface in container - linux

Question

I have an app that needs to access the internet and a local resource in a local area network. I want to run this app with docker compose. My host-system has 4 physical network ports and I connect with two Ethernet cables to the local-area net and the internet.
Host system can ping addresses from both networks successfully. But from inside the container I get no ping to outside. Tried with ping, tried a specific port with nmap, to no avail.
I have the following output when I analyze the network interfaces:
# network configuration host-system
enp03s31f6:
IPv4: XXX.XXX.XXX.XX
IPv6: XXXX:XXXX:XXXX:XXXX
enp2s0:
IPv4: 192.168.163.222 # <- host computer's address in local network
IPv6: XXXX:XXXX:XXXX:XXXX <- somehow an IPv6 address is assigned but only IPv4 is relevant
My docker-compose.yml is posted below:
# docker-compose.yml
version: "3.6"
networks:
dhcp_net:
app_local_net:
driver_opts:
com.docker.network.bridge.host_binding_ipv4: "192.168.163.222"
ipam:
driver: default
config:
- subnet: "192.168.163.0/24"
services:
main:
build:
context: .
image: "my_custom_app"
ports:
- "192.168.163.222:520:520"
- "0.0.0.0:80:80"
- "0.0.0.0:443:443"
networks:
dhcp_net:
app_local_net:
ipv4_address: 192.168.163.222
command: ./start_my_app
Of course there are more services in the compose-file, I left them out for better focus.
when I go into the container while it is running, I can successfully install iputils-ping and ping internet addresses. When I try to ping an address in the local network (app_local_net), host is unreachable.
When I go and inspect the container's network, following output is generated:
docker network inspect my_app_app_local_net
[
{
"Name": "my_app_app_local_net",
"Id": "b43184e60537541a764c3479ece9e861c49169b7629f810f532276b9949b522f",
"Created": "2021-11-17T17:37:50.935949741+01:00",
"Scope": "local",
"Driver": "bridge",
"EnableIPv6": false,
"IPAM": {
"Driver": "default",
"Options": null,
"Config": [
{
"Subnet": "192.168.163.0/24"
}
]
},
"Internal": false,
"Attachable": true,
"Ingress": false,
"ConfigFrom": {
"Network": ""
},
"ConfigOnly": false,
"Containers": {
"e3ae8336c0ac18f7d164a15bd9e7f590ffa18b8b1688900a7ad639f92ba7bcf2": {
"Name": "my_app_main_1",
"EndpointID": "4d2fa1e37a823144fe1ffd3ea4f0720d8be83d4fc17629d5921cbd781e775838",
"MacAddress": "02:42:c0:a8:a3:de",
"IPv4Address": "192.168.163.222/24",
"IPv6Address": ""
}
},
"Options": {
"com.docker.network.bridge.host_binding_ipv4": "192.168.163.222"
},
"Labels": {
"com.docker.compose.network": "app_local_net",
"com.docker.compose.project": "my_app",
"com.docker.compose.version": "1.29.2"
}
}
]
ifconfig shows the following:
root#container$:ifconfig
eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 172.21.0.2 netmask 255.255.0.0 broadcast 172.21.255.255
ether 02:42:ac:15:00:02 txqueuelen 0 (Ethernet)
RX packets 1132 bytes 1641413 (1.6 MB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 870 bytes 60160 (60.1 KB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
eth1: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 192.168.163.222 netmask 255.255.255.0 broadcast 192.168.163.255
ether 02:42:c0:a8:a3:de txqueuelen 0 (Ethernet)
RX packets 59 bytes 7508 (7.5 KB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 6 bytes 252 (252.0 B)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
eth2: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 188.10.163.4 netmask 255.255.255.0 broadcast 188.10.163.255
ether 02:42:bc:0a:a3:04 txqueuelen 0 (Ethernet)
RX packets 25 bytes 2975 (2.9 KB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 0 bytes 0 (0.0 B)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536
inet 127.0.0.1 netmask 255.0.0.0
loop txqueuelen 1000 (Local Loopback)
RX packets 16 bytes 1716 (1.7 KB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 16 bytes 1716 (1.7 KB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
if I do a $ ping -I eth1 192.168.163.102 inside the container, it will not work.
I see the following questions as related and already incorporated advice, but somehow I am stuck:
Docker compose yml static IP addressing
How can I make docker-compose bind the containers only on defined network instead of 0.0.0.0?
Docker Compose with static public IP over LAN but different with Host IP
Provide static IP to docker containers via docker-compose
Is there anything I am missing? Thanks for any help in advance :-)