Various embodiments of the present application set forth a computer-implemented method that includes intercepting a first system call from a client application, wherein the system call comprises a request to connect to a target destination; obtaining a file descriptor for a socket associated with the request to connect from the client application; modifying a network namespace for the socket; and causing a connection to be established from the client application to the target destination.