Network Namespaces and Socket Isolation

Isolate network interfaces so processes interact only with container-specific stacks.