World Congress 2025 • Aug 20, 2025 • Session details

Docker network without Docker

Oliver Seitz

Mastering Linux kernel primitives gives you total control over container networks. Strip away the Docker daemon to manually route traffic, boost performance, and remap ports without restarts.

Pause
Mute Enter Fullscreen
#1 about 3 min

Fundamentals of container network isolation and system components

How Linux namespaces and control groups restrict process access before introducing network communication pathways.

#2 about 5 min

Connecting namespaces with local virtual ethernet pairs

Constructing direct network pathways between isolated Linux namespaces using virtual ethernet interfaces.

#3 about 5 min

Connecting multiple container namespaces using virtual network bridges

Implementing network bridges to efficiently switch traffic between multiple container virtual interfaces without direct point-to-point links.

#4 about 4 min

Managing container packet flow with Linux kernel iptables

How network address translation and routing rules determine packet destinations and control layer access.

#5 about 2 min

Bypassing the Docker userland proxy for kernel networking

Disabling the default userspace proxy process allows local network traffic to route purely through kernel level packet chains.

#6 about 3 min

Inspecting default bridge architectures and custom Docker networks

Demonstrating how tooling sets up distinct isolated bridge networks to prevent default container cross-communication.

#7 about 5 min

Dissecting iptables rules preventing internal inter-bridge communication

Analyzing the specific packet filtering policies implemented to drop traffic attempting to cross isolated bridge networks.

#8 about 6 min

Manual port forwarding configuration using network address translation

Configuring kernel destination NAT rules to manually forward host ports into a running container without external tooling.

Matching moments

1:02 min

Abstracting container communication utilizing robust overlay networks

Marc Nimmerrichter · WWC 2022

1:59 min

Orchestrating with Kubernetes against Docker and accessing slides

Philipp Krenn · WWC 2022

3:32 min

High-level infrastructure topologies and isolation boundaries

Ryan Niño Dizon · LIVE

3:17 min

Injecting network messages directly from compromised container environments

Reinhard Reinhard · WWC 2024

3:12 min

Configuring Docker images, networking protocols, and persistent storage volumes

Francesco Ciulla Francesco Ciulla · WWC 2024

2:20 min

Isolating pod communication with strict network policies

Rico Komenda Rico Komenda · WWC 2025

Upcoming sessions on this topic

Open session

World Congress 2026 North America

Stop Running Mystery Meat in Production

Jeroen van Erp

Technical Advocate @ SUSE

Jeroen van Erp
Open session

World Congress 2026 North America

rm -rf: Horror Stories From Unsandboxed AI Agents (and How Docker Fixes This)

Rishab Kumar

Staff Developer Evangelist @ Twilio

Rishab Kumar
Open session

World Congress 2026 North America

It’s Alive! Taming the MLOps Franken-Stack: Write, Run, and Serve with Michelangelo

Eric Wang, Paul Zimmerman

Eric Wang
Paul Zimmerman
Open session

World Congress 2026 North America

On the Public Clock: Open-Source Defense When You're Not in the Club

Nicholas Muy

VP Engineering Platform and Security at Scrut.io

Nicholas Muy
Open session

World Congress 2026 North America

When Logging Becomes The Outage: Escaping the ECS Logging Trap

Rahul Tanniru

Senior Vice President Of Software Engineering, Jp Morgan Chase

Rahul Tanniru
Open session

World Congress 2026 North America

Run your agents in Kubernetes: Build once, deploy anywhere. But really?

Michal Salanci

Senior Systems Engineer at ESET Cybersecurity

Michal Salanci