diff --git a/libnetwork/controller.go b/libnetwork/controller.go
index 73d72750f1..1c5026f461 100644
--- a/libnetwork/controller.go
+++ b/libnetwork/controller.go
@@ -784,7 +784,9 @@ func (c *controller) NewSandbox(containerID string, options ...SandboxOption) (s
 		return nil, fmt.Errorf("ingress sandbox already present")
 	}
 
-	c.ingressSandbox = sb
+	if sb.ingress {
+		c.ingressSandbox = sb
+	}
 	c.Unlock()
 	defer func() {
 		if err != nil {