OPNsense unable to reach nested docker containers now and then

[thebull]

Hi all

I have two docker servers, one on the NAS and one nested within VMware ESX. Both work great with my old EdgeRouter X.

The issue I noticed is that OPNsense is unable to reach the both DNS servers in this docker containers. When I reboot the container or just wait all comes back.

Anyone have seen this issue before? The docker containers uses the macvlan (real own IP + Mac), it has something to do with endpoint learning? When I debug the Mac / arp table its a 100% match...

[thebull]

EDIT: after more debugging it seems more related to adguard itself:

https://github.com/AdguardTeam/AdGuardHome/issues/2657
https://github.com/AdguardTeam/AdGuardHome/issues/3217