Gen2 Docker resource classes do not currently support IP ranges and that is a blocker for some more secure use cases.