Container Isolation: Is a Container a Security Boundary?

This article examines whether Linux containers should be considered a security boundary, concluding they are not by default. It cites vendor guidance (Google, Red Hat), practitioner experiences (Netflix, Jessie Frazelle), and examples of gaps and specific vulnerabilities (runc, ContainerDrip, seccomp bypasses) to show that container isolation requires layered controls and deep expertise to approach a true boundary.