Use iptables to route traffic from the Workspace VM's external IP to the internal warden container IPs.