A software-defined networking component included in most orchestrators that can be used to isolate communication between applications that share the same physical network.
Sources:
NIST SP 800-190