First of all, you don’t need to explain your reasons, but I appreciate that you shared it.
That’s true. Docker is not Word document It requires technical skills do it right and it is not for someone “who does not have knowledge of IT”. Docker was the easiest way to deploy containers and still one of the easiest ways at least, but for a production environment, it must be configured by someone who have learned enough about Docker and the related systems to do so.
What kind of data was sent out from your Docker host and to where? Was it something generated by one of your application which was intended to send to an other container?
A Docker container is just an isolated system using Linux kernel namespaces. Docker will never send your data to the outside network. And I mean not just sensitive data, it will not send any data to anywhere. If it were possible, it would not be used by anyone, because that is unexeptable, doesn’t matter which system we are talking about.
Your application inside a container is the only thing that is responsible for its data and network traffic. Of course, if the host network is configured incorrectly somehow it forwards traffic it should not, that’s an other story. If you really know that Docker actually sent your data to an other host and not your application, please report it on GitHub: docker for linux because that is not allowed to happen.
How did you install Docker and Which version of it? I suppose you followed the instructions in the documentation:
As I suggested in my previous message, you can try MacVLAN to give your containers an IP address on your LAN network instead of a local IP address on the Docker bridge.
The fact that I don’t like it, doesn’t mean I am right. I didn’t want to explain why I felt that way, because that would be an other topic and not closely related to your requirements.
If you really want to have IP addresses the way you shared in your post, bound to your host machine with additional route settings, I don’t think that is a good way and I am not sure if that is even possible. If it is, I don’t know if anyone ever tried it.
If you find a solution for that, please, let me know.