How Docker Desktop Networking Works Under the Hood (2022)

Docker Desktop uses a helper Linux VM for containers, but VPN policies often block traffic from the VM. To solve this, Docker Desktop forwards all traffic at user-level via vpnkit, a TCP/IP stack written in OCaml using MirageOS libraries. This ensures container networking works across VPNs.