DNS instead of static IPs
Discover internal services by DNS names instead of unstable container or Pod IPs.
Docker networking
With Shared Network enabled, applications in one organization on the same Docker host join an organization-scoped bridge. Service aliases include an application identifier and service name. This bridge does not span hosts.
Kubernetes networking
Service objects provide stable discovery inside a namespace. Label-based NetworkPolicies narrow opt-in communication across apps in the same namespace. Your CNI must enforce NetworkPolicy.
Keep isolation explicit
Only enable shared networking where necessary. This is not a replacement for comprehensive NetworkPolicies, mTLS or workload identity.