> - Run with -icc=false. This should have been the default +1 But I would add: not just form a security perspective but also from a architecture perspective to

> - Run with -icc=false. This should have been the default +1 But I would add: not just form a security perspective but also from a architecture perspective to enforce encapsulation. Have been wondering about this too: http://stackoverflow.com/questions/29952937/why-is-inter-container-communication-in-docker-the-default http://stackoverflow.com/questions/29952937/why-is-inter-con...