You may optionally add "--net=host" to the "docker run" command to let the container use the host's network stack directly. That should eliminate the overhead I think.