I was actually going down rabbitholes today trying to figure out how to do a sane Docker setup where all the containers couldn't connect to each other. Your notes would be valuable at most any level of polish.

▲

esseph an hour ago | parent [-]

If you create each container in its own network namespace, they won't be able to.

	▲	HumanOstrich 18 minutes ago \| parent [-]
		It's a little more complex than that for any non-trivial layout where some containers do need to talk to other containers, but most don't.