Exclude loopback-to-loopback connections from DNAT rules, to allow userland proxying
Emulate DNAT in userland for loopback-to-loopback connections. This makes container ports available from localhost.
Shutdown loopback-to-loopback proxy when unmapping a port
Add a test for allocating tcp ports and reaching them on localhost