Shared network namespaces using --net=container:

Here’s one very practical example. You run a VPN Client in container A. You want only traffic from container B to run over the VPN that is established by container A. When you fire up container B, you pass in the --net:container:A switch and it then uses the vpn network stack of A.