as noted by cb, apparently on some instances of vmware infra, offloading checksums might not work thus breaking things like docker swarm and stuff. (altho docker swarm sucks, just use k8s). to fix it, tho, you can use either ethtool --offload $int tx off rx off, or Disable-NetAdapterChecksumOffload -Name $int -IpIPv4 -TcpIPv4 -UdpIPv4 -TcpIPv6 -UdpIPv6.