docker 桥接网络问题

[GGGG430]

如题, 使用 docker-compose 部署容器, 容器内部使用桥接网络,

现在出现一个问题, A 机器发出 tcp 握手到 B 机器上面的某个端口(映射到容器内部如 nginx/mysql 端口),

会偶发多次握手无响应的情况, 使用 tcpdump 抓包在 A 机器/B 宿主机/B 容器内部, 都可正常抓到第一次握手情况, 但容器内就是不返回第二次握手, 如下:

19:39:58.549417 IP 1.2.3.4.64777 > 10.0.0.1.xfer: Flags [S], seq 335042964, win 65535, options [mss 1460,nop,wscale 6,nop,nop,TS val 2609968730 ecr 0,sackOK,eol], length 0
19:39:58.614195 IP 1.2.3.4.64777 > 10.0.0.1.xfer: Flags [S], seq 335042964, win 65535, options [mss 1460,nop,wscale 6,nop,nop,TS val 2609968795 ecr 0,sackOK,eol], length 0
19:39:58.679346 IP 1.2.3.4.64777 > 10.0.0.1.xfer: Flags [S], seq 335042964, win 65535, options [mss 1460,nop,wscale 6,nop,nop,TS val 2609968860 ecr 0,sackOK,eol], length 0
19:39:58.744320 IP 1.2.3.4.64777 > 10.0.0.1.xfer: Flags [S], seq 335042964, win 65535, options [mss 1460,nop,wscale 6,nop,nop,TS val 2609968925 ecr 0,sackOK,eol], length 0
19:39:58.809127 IP 1.2.3.4.64777 > 10.0.0.1.xfer: Flags [S], seq 335042964, win 65535, options [mss 1460,nop,wscale 6,nop,nop,TS val 2609968990 ecr 0,sackOK,eol], length 0
19:39:58.873826 IP 1.2.3.4.64777 > 10.0.0.1.xfer: Flags [S], seq 335042964, win 65535, options [mss 1460,nop,wscale 6,nop,nop,TS val 2609969055 ecr 0,sackOK,eol], length 0
19:39:58.935004 IP 1.2.3.4.64777 > 10.0.0.1.xfer: Flags [S], seq 335042964, win 65535, options [mss 1460,nop,wscale 6,nop,nop,TS val 2609969116 ecr 0,sackOK,eol], length 0
19:39:59.056235 IP 1.2.3.4.64777 > 10.0.0.1.xfer: Flags [S], seq 335042964, win 65535, options [mss 1460,nop,wscale 6,nop,nop,TS val 2609969237 ecr 0,sackOK,eol], length 0
19:39:59.295717 IP 1.2.3.4.64777 > 10.0.0.1.xfer: Flags [S], seq 335042964, win 65535, options [mss 1460,nop,wscale 6,nop,nop,TS val 2609969477 ecr 0,sackOK,eol], length 0
19:39:59.777119 IP 1.2.3.4.64777 > 10.0.0.1.xfer: Flags [S], seq 335042964, win 65535, options [mss 1460,nop,wscale 6,nop,nop,TS val 2609969958 ecr 0,sackOK,eol], length 0
19:40:00.737681 IP 1.2.3.4.64777 > 10.0.0.1.xfer: Flags [S], seq 335042964, win 65535, options [mss 1460,sackOK,eol], length 0

请问各位有遇到容器内监听的端口, 然后映射到宿主机, 此时会偶发握手失败的情况吗?