the fact that this is needed is sort of a testament to how badly there needs to be a coordinated overhaul of the linux kernel networking situation wrt vms and containers

https://passt.top/passt/about/#pasta-pack-a-subtle-tap-abstraction