Podman 4 rootless uses a different network stack: https://www.redhat.com/sysadmin/podman-new-network-stack

It is performant enough for my usecase: services used by me and a few friends.

I don't use the root mode, but I was under the impression it doesn't have the same well known docker issue where it exposes everything on the public interface(and using a firewall on top of it is complicated)