Container Monitoring and Enforcement

[Prateeknandle]

Hello folks, I've few doubts wrt container monitoring and enforcement:

1. I see here that container monitoring is possible but is it only possible with ebpf? is there any way we can monitor containers with proc method?
2. Is container enforcement possible? Is container enforcement currently done with rules present for host? Is there any way we can enforce specifically for the containers (like it should only enforce in containers and not on its host)?
3. Is container to container dns enforcement possible?