Network segmentations between stack


I uses one env called prod that has 5 host all running centos7.

We have one app that we would like to run in its one network layer so that apps from other stacks dont have any network connections ti that stack.

Basic there should be no network between our two stacks.

The qestion is how can you do this?

If there anything in rancher now that I can use to have the network setup.

Can Icreate a sepperat overlay network like a flannel network and use that into docker to sepperat them ?

What do you think and how should you solve this problem ?

Currently each network has one overlay network so the only way to do this is with separate environments (and therefore hosts, because a host belongs to one environment).