Containers and cloud networking
veth pair
Two virtual cards joined like the ends of a cable: what goes in one comes out the other, even across namespaces.
A veth pair is made as two cards at once (ip link add veth-web type veth peer name eth0 netns web).
One end becomes the container's eth0 inside its namespace; the other stays on the host, usually plugged into a
bridge such as docker0 (ip link set veth-web master docker0). Taken off the bridge, the container is
unplugged: its card is up but nothing answers.