Docker silos your apps into VMs called containers so if it malfunctions, the entire server doesn’t need to reboot only the docker container. You can also wall off select containers’ network access through VPNs and allow others through. Seems to work a bit better than split tunneling for me
Can you use a VPN on TL?