Assign a local ip to jails to avoid to have 2 system who use the same port on the same ip address.
Then forward some ports of the jails with the public ip .
http://kbeezie.com/freebsd-jail-single-ip/
https://www.freebsd.org/doc/handbook/firewalls-pf.html
Closing former Ysul issues before server decom/migration.
Containers use to test application isn't in the new Ysul strategy:
as app containerized environment should match prod one, this should be handled:
A new proposal for a ZFS / jails containerization would ask to evaluate this NAT idea again.