远程调用服务的时候报No route to host (Host unreachable),关闭防火墙或者开启防火墙后需要重启一次docker

远程调用另外一个服务的时候报No route to host (Host unreachable),
百度后知道是防火墙没关的原因.
systemctl stop firewalld.service 暂时关闭防火墙
systemctl disable firewalld.service 永久关闭防火墙

关闭防火墙后记得重启docker!!!
否则docker可能报
docker: Error response from daemon: driver failed programming external connectivity on endpoint sd-system-from-12 (f0b585724e0a756daf3a9333a7fcd3cf5cb422f8f24fad621b2fd7b0cfd1742a): (iptables failed: iptables --wait -t nat -A DOCKER -p tcp -d 0/0 --dport 11001 -j DNAT --to-destination 172.17.0.3:11001 ! -i docker0: iptables: No chain/target/match by that name.
(exit status 1)).
再重启下docker
systemctl restart docker
问题解决.