You might also want to pass --host-resolver-rules="MAP * 0.0.0.0 , EXCLUDE localhost" to Chrome to avoid leaking DNS queries [1].

Edit: typo

[1]: https://www.chromium.org/developers/design-documents/network...