This video explains the below.
Docker Cgroups and their use in limiting resources for container processes in Linux. This is explained with multiple examples including memory, cpu, pids etc. A concept of ddos attack called fork bomb is also explained with example and it's preventions in docker