Agents in private netns reach the forge at forge.<domain> via the gateway, not via localhost directly. The conclusion (firewall only matters for external access) is correct; the mechanism description was stale from the pre-isolation era.