John T. MyersandJohn Myers ff52643237 feat(sandbox): allow egress to private IP space via allowed_ips policy field (#60) ...

* feat(sandbox): allow egress to private IP space via allowed_ips policy field

Add an allowed_ips field to NetworkEndpoint that accepts CIDR notation and
exact IPs, enabling sandboxes to reach private IP space under policy control
while maintaining SSRF protections for loopback and link-local addresses.

Three modes are supported:
- Default (no allowed_ips): all private IPs blocked (existing behavior)
- Host + allowlist: domain must resolve to an IP in allowed_ips
- Hostless allowlist (no host): any domain allowed if resolved IP matches



Co-authored-by: John Myers <johntmyers@users.noreply.github.com>

2026-03-02 19:29:34 -08:00

..

inference

feat(sandbox): move inference execution to sandbox-local routing (!79) (!52)

2026-02-25 09:57:42 -08:00

private-ip-routing

feat(sandbox): allow egress to private IP space via allowed_ips policy field (#60)

2026-03-02 19:29:34 -08:00

bring-your-own-container.md

feat(sandbox): add image build/push and fix cluster deploy (!34)

2026-02-22 20:32:18 -08:00

openclaw.md

feat(sandbox): enable port forwarding and setup openclaw (!33)

2026-02-19 16:03:23 -08:00

sync-files.md

feat(cli): replace rsync with tar-over-SSH for sandbox file sync (!41)

2026-02-23 08:22:52 -08:00

vscode-remote-sandbox.md

feat(sandbox): VS Code Remote-SSH support with platform detection fix and network policy (!42)

2026-02-26 09:06:37 -08:00