Netclient on host is probably necessary, but one thing you can try is to reverse proxy the traffic into the container itself. In theory that should work