Need Help with Network Failover Configuration in Dockerized RaspAP

[ChristianMichiels]

Hi everyone,

I'm facing a challenge setting up a network failover configuration on a Raspberry Pi running RaspAP inside a Docker container. My goal is for the default route to automatically switch from Ethernet (eth0) to Wi-Fi (wlan1) whenever eth0 is disconnected. Clients are connected to the AP through wlan0.

This setup worked perfectly before I dockerized RaspAP, but now I can't seem to replicate the functionality. I've adjusted my IPTables rules and the routing metrics to prioritize eth0 over wlan1, with wlan0 as the least preferred route. Here are the current settings:

• IP route shows the correct metrics for eth0, wlan1, and wlan0, with eth0 being the highest priority.
• IPTables configuration is tailored to manage traffic between these interfaces, ensuring connectivity between eth0, wlan1, and wlan0.

I remain connected to the AP when eth0 is pulled however I only have local networking. Anything that should be heading upstream out of Wlan1 does not seem to work in the container. On the host side I am still provided WAN access. IP tables and route both inside and outside of docker are the same. Any troubleshooting guidance or help would be much appreciated. Or if someone else who has recreated this setup is reading this, id love to hear from you.

:~ $ ip route
default via 10.10.0.1 dev eth0 proto dhcp src 10.10.0.188 metric 1002
default via 10.10.0.1 dev wlan1 proto dhcp src 10.10.0.250 metric 3004
10.3.141.0/24 dev wlan0 proto dhcp scope link src 10.3.141.1 metric 3005
10.10.0.0/24 dev eth0 proto dhcp scope link src 10.10.0.188 metric 1002
10.10.0.0/24 dev wlan1 proto dhcp scope link src 10.10.0.250 metric 3004
172.17.0.0/16 dev docker0 proto kernel scope link src 172.17.0.1 linkdown

:~ $ sudo iptables -S
-P INPUT ACCEPT
-P FORWARD DROP
-P OUTPUT ACCEPT
-N DOCKER
-N DOCKER-ISOLATION-STAGE-1
-N DOCKER-ISOLATION-STAGE-2
-N DOCKER-USER
-A FORWARD -j DOCKER-USER
-A FORWARD -j DOCKER-ISOLATION-STAGE-1
-A FORWARD -o docker0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -o docker0 -j DOCKER
-A FORWARD -i docker0 ! -o docker0 -j ACCEPT
-A FORWARD -i docker0 -o docker0 -j ACCEPT
-A FORWARD -i eth0 -o wlan0 -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -i wlan0 -o eth0 -j ACCEPT
-A FORWARD -i wlan1 -o wlan0 -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -i wlan0 -o wlan1 -j ACCEPT
-A DOCKER-ISOLATION-STAGE-1 -i docker0 ! -o docker0 -j DOCKER-ISOLATION-STAGE-2
-A DOCKER-ISOLATION-STAGE-1 -j RETURN
-A DOCKER-ISOLATION-STAGE-2 -o docker0 -j DROP
-A DOCKER-ISOLATION-STAGE-2 -j RETURN
-A DOCKER-USER -i src_if -o dst_if -j ACCEPT
-A DOCKER-USER -j RETURN