Nomad Ingress for Network Namespaces

[nicholasjackson]

Nomad allows a network namespace to be defined for a task group, this namespace does not allow ingress traffic from any other namespace. Traffic in the group can talk freely.

In order to enable Ingress when network namespaces are used we need a way to route from a host level to a particular application running in a network namespace.

Ideas:

• Proxy running at host IP which has full access to all network namespaces
• Proxy exposes an API which allows a port to be opened from the host to the remote namespace