The Docker daemon is running inside the VM, the Docker client is running on the host. The client needs to talk to the host's port 4243, which gets forwarded to 4243 in the VM to talk to the real daemon. :)