iner. The UFS provides lightweight and fast layering, which is the building block of container. Docker container builds on top of these techniques into the container format in the form of libcontainer. In addition, Docker also supports traditional Linux container LXC. The entire Docker stack in a clustered dockerized environment con- tains five major layers: Cluster Manager layer, Node (or host) layer in the cluster, Docker Demon layer that runs on each node, Contain- ers layer created by the Docker Demon, and Applications layer that contains applications run on each container. Different Docker cluster managers are structured in different forms, for example, on Swarm, the containers are part of its structure, but on Kubernetes, there is only a Pod that represents a set of containers, and the user can control the Docker containers just through the cluster Pods. Network Virtualization Network virtualization refers to the technology that enables partition- ing or aggregating a collection of network resources and presenting them to various users in a way that each user experiences an isolated 2.3 Network Virtualization and unique view of the physical network [23-25]. The abstraction of network resources may include fundamental resources (i.e., links and nodes) or derived resources (topologies) [23]. This technology may vir- tualize a network device (e.g., a router or NIC) a link (physical channel, data path, etc.), or a network. With the advent of software-defined networking architectures and usage within virtualized cloud systems, the separation of vir- tual networking from the physical underlying resources pose new challenges. Most modern data center virtual network technologies use a tunneling system to emulate a network as an overlay onto a physical network infrastructure. Examples of these virtual net- works include VXLAN and NVGRE. An end host's network traffic is admitted from the Virtual Tunnel End Point (VTEP) into the tunneling system (the virtual network). The tunneling system usually is agnostic to the en