happily, this seems to have been something wrong with the socat processes running inside the containers. changed one of them to an nginx container, and everything Just Worked. kinda annoyed, but not enough to really spend any time root causing this. going to just take the win.