Publish the ports you need, give services stable names, and keep ensemble DNS inside the stack so containers find each other without hard-coded addresses.
Networking features
- Published ports — expose selected services to the host or the edge.
- Ensemble aliases — resolve peers by service name inside the stack.
- Host aliases when needed — map product names in
/etc/hostsfor demos and local tooling.
Keep planes clear
Public HTTPS on product FQDNs is separate from mesh traffic between nodes. Publish only what the edge should see; leave the rest on the private fabric.