A huge pain point with Docker since day one has always been the ability to do iptables filtering of incoming traffic. Exposed ports were not filtered, rules could not persist a Docker daemon restart and no easy way to do filtering based on IP etc. The actual…