Why Your Docker Containers Aren’t Egressing From the IP You Think They Are

A debugging story that started with a database timeout and ended with a one-line iptables fix