Not that I have researched what containers actually do - but if they perform better than XEN/UML - it would seem they share the same kernel as the primary - and ie. works similarly to the vserver project? where you can firewall each , on the primary host. (dom 0 in XEN speak afaik :)
Copyright © 2017, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds