> Have you ever looked at what Docker puts in your iptables? Some forwarding rules. > I challenge you to understand what's happening with your networking afte

> Have you ever looked at what Docker puts in your iptables? Some forwarding rules. > I challenge you to understand what's happening with your networking after that. They're incredibly simple forwarding rules, to make sure that only the containers that you specify can connect to the Internet, and all the others in a particular group can only connect to each other. > If you want containers, lxc command line and a bit of configuration for a bridge interface is all you really need. Yes, assuming you never need to maintain it, or run more than one project per server.