Yo, full disclosure I work @ Heroku. The story is mostly the same on our standard product everyone is familiar with. We have a "private" version that provides a

Yo, full disclosure I work @ Heroku. The story is mostly the same on our standard product everyone is familiar with. We have a "private" version that provides a private subnet between the containers as well as DNS targeting (e.g. 1.web.app.zone). We're working hard on this stuff and I'd love to hear more about what primitives you'd like to see us expose to ease any quirks you've hit.