An engineering solution for creating a hardware-isolated network sandbox (network namespace) in Linux. All L3 traffic within the isolated space is forcibly intercepted by a virtual tunnel interface ...