When something on your home network is continually misbehaving, whether it's a container that can't reach a service a couple of hops away, or a VM's traffic can't reach outside of its virtual adapter, the first line of defense has always been similar. I'd usually load up Wireshark or run a tracert capture to see where things are falling apart. Both approaches are worthy of your troubleshooting efforts, but there's an additional one worth adding to your arsenal, courtesy of Microsoft.