This is a very good article. Container networking is as simple as linux networking, which isn't. Its as much of a faff now as it was when I was doing KVM virt

This is a very good article. Container networking is as simple as linux networking, which isn't. Its as much of a faff now as it was when I was doing KVM virtualisation professionally (don't, pay and use VMware. You'll be much happier, and have lots of free time) To debug its a massive arse and lacks any useful and friendly debugging tools. One thing that does help is either to use VLANs or a second adaptor to separate container traffic from control. It makes debugging slightly easier. By easier, I mean that when you accidentally misconfigure it, there is a better chance that you'll be able to get control of the host still.