Looking at Bluemix Docs, Docker registry(private and IBM) and file share are shown outside the private network. Is this outdated or not applicable to dedicated?
The picture referenced by you shows the file share outside the container private network, but inside the Bluemix private network. So all the components are secure and hidden from the outside world.