Net=host basically defeats most benefits of network isolation you get with docker. It should only be used for quick hacking. Use forward and reverse args instea

Net=host basically defeats most benefits of network isolation you get with docker. It should only be used for quick hacking. Use forward and reverse args instead. And as others said, connecting out from the container is possible by default, with the only confusion that localhost might not be what you think.