The z/OS TCP/IP stack is used as a forwarder to and from zCX for access to the external  TCP/IP network. Access to the external network is implemented through the z/OS TCP/IP  stack. You might want to restrict access in your installation to and from the zCX instances.  Therefore, your networking team might establish z/OS IP filters to prevent unauthorized  network traffic. The red arrow in Figure 2-12 on page 36 shows you the z/OS TCP/IP address, which is  configured for the z/OS system itself. Chapter 2. z/OS Container Extensions planning  35 Figure 2-11 Cross memory network connection between z/OS applications and the zCX virtualization  layer