1. Communication is governed between pods, not containers. Pod communication to service is provided by the services object. K8s doesn't use NAT to communicate between containers.
2. Network address translation
3. CNI plugins that use the overlay network, or the kubenet plugin, which uses the bridge and host-local features.
4. Canal, Calico, Flannel, and Kube-router.
5. Pods.
6. Userspace, iptables, and ipvs.
7. Virtual IPs, service proxies, and multi-port.
8. The spec.
9. GCE, nginx, Kong, Traefik, and HAProxy.
10. Use namespaces, RBAC, container permissions, ingress rules, and clear network policing.