We occasionally need to add ports for FW_SERVICES_EXT_TCP in /etc/sysconfig/SuSEfirewall2. After restarting running firewall:
systemctl restart SuSEfirewall2.service
But docker dynamically uses the firewall for routing, so the firewall restart breaks our container routing. The only solution that I have found is to restart docker. This is expensive to do so I am looking for a better solution that does not impact our running containers.