bridge must be used with container-ip, vice versa