<p>With the rapid development of containerization technology, the workload of container safety isolation management gradually increased, but the efficiency was not high. At the same time, safety problems caused by insufficient container isolation capabilities became increasingly apparent. We proposed a container network isolation scheme based on behavior similarity in this context. First, the system call sequence was used as the benchmark for measuring the behavior similarity of containers, and an optimized hierarchical clustering algorithm (N-HCluster) was employed to divide containers with similar behavior into the same container network security domain. We then designed a container network isolation architecture based on security domains to enhance the container network’s isolation and security. Finally, we evaluated this protocol’s feasibility, accuracy, and performance through experiments. The experimental results showed that this scheme was effective and feasible and demonstrated good container network isolation capabilities.</p>