I think you said the netclient service on the node is trying to ping the mqtt process (which is running in a container on the netmaker server via port 1883). so the 'ping' is from the node to the mq container over the 172.22.0.0/16 subnet. is that right?