Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Sign up
Appearance settings

Connection refused from Windows Docker container with process isolation on Windows Server 2025 or Windows 11 #620

Closed
Labels
bugSomething isn't working triageNew and needs attention

Description

Describe the bug
On Windows Server 2025 and Windows 11 in a container with process isolation TCP test fails and it's unable to access any web page or download any files.

To Reproduce
Steps to reproduce the behavior:
Run the container with process isolation:

> docker run -it --rm --isolation process mcr.microsoft.com/windows/servercore:ltsc2025 powershell

Test connection

> Test-NetConnection -Port 
WARNING: TCP connect to (13.107.4.52 : 80) failed 
ComputerName : internetbeacon.msedge.net
RemoteAddress : 13.107.4.52
RemotePort : 80
InterfaceAlias : vEthernet (Ethernet)
SourceAddress : 172.29.72.49
PingSucceeded : True
PingReplyDetails (RTT) : 35 ms
TcpTestSucceeded : False

Expected behavior
Tcp test succeeds:

> Test-NetConnection -Port 80 ComputerName : internetbeacon.msedge.net
RemoteAddress : 13.107.4.52
RemotePort : 80
InterfaceAlias : Ethernet
SourceAddress : 172.29.69.143
TcpTestSucceeded : True

Configuration:

  • Edition: tested on both Microsoft Windows 11 Pro 10.0.26200, Microsoft Windows Server 2025 Standard 10.0.26100
  • Base Image being used: mcr.microsoft.com/windows/servercore:ltsc2025
  • Container engine: docker
  • Container Engine version: 28.5.1

Additional context

  • It's the same docker image and the same docker network, the only difference is the isolation type, and with hyperv isolation tcp test succeeds.
  • Ping and TRACERT commands shows no issues
  • Disabling Firewall on the host didn't help
  • Also I've tried to disable NetAdapterRSC according to this issue without success
  • Sniffing traffic with wireshark on the host didn't show anything except ARP and DNS packets

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working triageNew and needs attention

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions

        AltStyle によって変換されたページ (->オリジナル) /