No one answered the question and was trampled on.

answer yourself:
docker will write rules in iptables. Restrict the mutual access of containers under different bridges. Just delete this restriction.

originally, the original purpose of setting iptable in docker is to isolate containers, and you have to let them ping orz

if you want them to communicate, you might as well join a net namespace when you create it