Building Docker's Network From Scratch: Namespaces, veth Pairs, Bridges, dnsmasq, and iptables

docker run -p 8080:80 nginx gives you an isolated network stack, a private IP, internet access, and a port exposed to the host, all in one line. Add a user defined network (which is what docker compos