Each User has his own ovs network, which means each host that has user's container will build a ovs bridge named 'docklet-br-uid' only for him. And the ovs bridges will be connected by GRE Tunnels with key. The key will be set by uid.
Docklet will build user's network when starting or recovering network automatically.