A first container of a first device can receive information that identifies a configuration of a first interface and a second interface of a second container of the first device. The first container can include a self-contained execution environment. The first container can configure a firewall of the first device to enable network traffic to be transferred between a second device and a third container of a third device via the first interface and the second interface.