3 ms·
Not at all. IP tables is used to route traffic between containers, yes, but the isolation is done by network namespaces.
by ecnahc515 8y ago
Not at all. IP tables is used to route traffic between containers, yes, but the isolation is done by network namespaces.
- geggam 8y agoInteresting... so you create a network and isolate it from the rest of the network ? How do your applications serve traffic ? Or... you create a network with namespaces and use iptables aka the firewall to network that to the other networks you created with namespaces ? Think about it logically... when you use TCP you share the connections... your namespace isolation is exposed by the very thing that firewalls it... make sense ?