You might want to try out nftables backend: https://docs.docker.com/engine/network/firewall-nftables