Containers and cloud networking
VPC (virtual private cloud)
A private network of your own inside a cloud provider, split into subnets whose route tables decide their way out.
You choose the address range (say 10.0.0.0/16) and carve it into subnets. Every subnet's route table starts with the local route, so the whole VPC reaches itself through the provider's implied router. A subnet is public when its table sends 0.0.0.0/0 to the internet gateway, and private when it sends it to a NAT gateway (or nowhere). Azure calls it a VNet. Many customers' VPCs share the provider's hardware, kept apart by its overlay, so two of them can use the same addresses (multitenancy).