CCIE Automation — Design M1 Q2: Container health-check can’t reach app

Background Information — Aquila Dynamics Labs (ADLs)

Container health-check can’t reach app

Which actions will resolve this while preserving isolation and least change?

A. Switch the container to host networking to bypass Docker NAT entirely.
B. Create a user-defined bridge with a non-overlapping CIDR (e.g., 172.31.10.0/24) and attach the health-check container to it.
C. Add a static route on the app host back to 172.18.0.0/16 via the probe host.
D. Enable IP masquerading (SNAT) for the health-check network so egress to 10.60.8.0/24 uses the host’s routable IP.
E. Open inbound 443 on the app firewall.

Comments

No comments yet. Why don’t you start the discussion?

Leave a Reply

Your email address will not be published. Required fields are marked *