Publishing Container Ports

how DNAT enables inbound traffic to containers, how Docker's -p flag publishes ports, and how to implement port forwarding yourself