Network Restrictor allowing for semi-isolated container environments with access to allow-listed resources - View it on GitHub