What if you rent a bare metal server in a data center? Or rent a VPS from a basic provider that expects you to do your own firewalling? Or run your home lab docker host on the same vlan as other less trusted hosts?

It would be nice if there was a reliable way to run a firewall on the same host that’s running docker.

You may say these are obscure use cases and that they are Wrong and Bad. Maybe you’re right, but personally I think it’s an unfortunate gap in expected functionality, if for no other reason than defense-in-depth.

Thanks for your comments! I’ve fixed the RSS file now I think.

Arpeggi on iOS is the best I’ve found. Available via TestFlight invite only. I plan to switch to Android in the next year, so I’m always interested to hear what clients people like over there too.