Network Address Translation, managed by firewalls primarely and allows e.g. containers to interact with remote networks or to forward connections to ports on kernel-level.
Separate sets of network interfaces. Used by containers a bunch.