This should probably be flagged as a product pitch, since it ends with "oh, look, this is challenging, but we have this solution for ... all of it". There real

This should probably be flagged as a product pitch, since it ends with "oh, look, this is challenging, but we have this solution for ... all of it". There really isn't a lot of structure here, although disabling NET_RAW is always a good tip (unless you're shoving telco workloads into containers, that is).