I have an Ubuntu 14.04 LXD container on an Ubuntu 14.04 Server host (using lxd-git-master PPA). I want to prevent it from reaching any other containers or from communicating with the public Internet over any IP range except for a specific /32 block (that is, one IP). This IP is statically routed to my server in a datacenter and I need to be able to specify the IP, subnet, and default gateway.
I read that LXD itself does not do networking, so what program/utility specifically is the easiest to install and configure in a direct way to explicitly configure this?
P.S. I need it to be able to bind to all possible TCP and UDP ports on that IP address, and it would be ideal if the host would not try to bind to the IP when it starts up a process that binds on 0.0.0.0.