I just want to mention that I run OpenWrt in Docker via a full system emulation (qemu inside Docker). I'm using it as my main router. Because the network is completely isolated from the host network, there is no Docker firewall mess up.
Link: https://github.com/AlbrechtL/openwrt-docker
Just for transparency, I presented my approach here: OpenWrt Docker Image (experimental) - #6 by albrechtl