Connections incoming from the Internet cannot directly reach network namespaces. Two forwarder implementations are used for transferring connections to Rootless Containers' network namespaces. RootlessKit The RootlessKit implementation is used by both Docker/Moby and Podman. slirp4netns slirp4netns also has its own port forwarder. The slirp4netns implementation is slower than RootlessKit, however, the slirp4netns implementation can keep source IP addresses, while the RootlessKit implementatio...