Question: what is veth in docker?
Answer: Docker spawns a container in the containers own network namespace (use the CLONE_NEWNET flag defined in sched. h when calling the clone system call to create a new network namespace for the subprocess) and later on runs a veth pair (a cable with two ends) between the container namespace and the host network stack.