Why must a Docker container port be published for a host client to reach an otherwise isolated service?
Publishing reconfigures the application to listen on the chosen host port.
Publishing installs the server application inside the container.
Publishing creates a forwarding rule from a host port to the service port in the container's network namespace.
Publishing permanently removes all network isolation from the container.