ProtectHostname will generate a new hostname for the service process hierarchy.

JoinsNamespaceOf can be used to set up network namespaces (albeit in a clunky way).

It is possible, but multiplexing networked services requires significantly more effort with systemd than with others. I do not have a strong use case yet to invest in tooling for it, but it may come.