Connection from host uses a docker proxy by default, which is very basic, adds CPU overhead and is source of many problems. You can disable it in /etc/docker/daemon.json with { "userland-proxy": false }. Then docker will use iptables for port redirection, which is always better.