Comment by esseph

If you create each container in its own network namespace, they won't be able to.