Windows Server 2016 provides four networking modes: NAT, transparent, L2 bridge and L2 tunnel. NAT is the default networking mode for the Windows Container host. It is the simplest form, which uses the host's IP and NAT for providing an IP range for containers. NAT networking mode is suitable for development environments. Windows Server 2016 HNS creates a firewall rule automatically when a new container is created using NAT mode. Windows Containers Networking stack can be used to create isolated tenants, apply security policies and custom routing. Windows Server 2016 provides an abstraction layer over physical networks called SDN which can be used to programmatically create and manage networks.
L2 bridge and L2 tunnel use SDN and is the most preferred way of networking in private clouds. Cross-Subnet and cross node connections are possible using all four networking modes but Transparent, L2 bridge/L2 tunnel are preferred because NAT poses restrictions on port usage. The host port...