nevermind, I found a solution (which I need to get a closer look at) in the "Bosh lite" installation guide (https://github.com/cloudfoundry/bosh-lite). There is a script bin/add-route which is supposed to "Add a set of route entries to your local route table to enable direct Warden container access every time your networking gets reset (e.g. reboot or connect to a different network). Your sudo password may be required."