Ideally we'd run the proxy in a container itself. But to really make that work, we'd need it to be able to use the --net=host mode in Docker.