phjarea217 / socketbox Goto Github PK

From README: "One advantage of passing the sockets onto another program using a UNIX domain socket is that the other program can be in a completely different environment. More specifically, the other program can be in an LXC or Docker container, or some other environment where the network namespace is different. This allows daemons in other network namespaces to accept connections that would only be available from the host, even if the network namespace is completely isolated."

I'm trying to find a way to launch a program inside a netns, make it listen inside there and send its connection to another. The purpose is to get rid of veth pairs and proxies/port forwarders listening in the veth (that introduce overhead).

Is it possible to do that with help of socketbox? If it is possible, how could I do that?

This project already do that transparently: https://github.com/vi/netns_tcp_bridge