A close look at docker0 and Docker's default bridge: how packets flow, which iptables rules the daemon programs, where it diverges from user-defined bridges, and how to migrate.