wehub-resource-sync
e0e362d700
SDK Tests / SDK CI (push) Blocked by required conditions
SDK Tests / changes (push) Successful in 2m29s
Real E2E Tests / changes (push) Successful in 2m29s
SDK Tests / Python SDK Tests (sandbox) (push) Waiting to run
SDK Tests / CLI Quality (push) Waiting to run
SDK Tests / CLI Tests (push) Waiting to run
SDK Tests / Python SDK Quality (code-interpreter) (push) Waiting to run
SDK Tests / Python SDK Quality (sandbox) (push) Waiting to run
SDK Tests / Python SDK Tests (code-interpreter) (push) Waiting to run
SDK Tests / JavaScript SDK Quality And Tests (code-interpreter) (push) Waiting to run
SDK Tests / JavaScript SDK Quality And Tests (sandbox) (push) Waiting to run
SDK Tests / Kotlin SDK Quality And Tests (sandbox) (push) Waiting to run
SDK Tests / Kotlin SDK Quality And Tests (code-interpreter) (push) Waiting to run
SDK Tests / C# SDK Quality And Tests (code-interpreter) (push) Waiting to run
SDK Tests / C# SDK Quality And Tests (sandbox) (push) Waiting to run
SDK Tests / Go SDK Quality And Tests (push) Waiting to run
Deploy Docs Pages / build (push) Has been cancelled
Deploy Docs Pages / deploy (push) Has been cancelled
Real E2E Tests / JavaScript E2E (docker bridge) (push) Has been cancelled
Real E2E Tests / Python E2E (docker bridge) (push) Has been cancelled
Real E2E Tests / Java E2E (docker bridge) (push) Has been cancelled
Real E2E Tests / C# E2E (docker bridge) (push) Has been cancelled
Real E2E Tests / Go E2E (docker bridge) (push) Has been cancelled
Real E2E Tests / Real E2E CI (push) Has been cancelled
2.1 KiB
2.1 KiB
title, description
| title | description |
|---|---|
| Components | Overview of OpenSandbox system components — server, execd, ingress, and egress. |
Components
OpenSandbox is composed of several system components that work together to provide sandbox lifecycle management, in-sandbox execution, and network control.
Architecture
┌─────────────┐ ┌─────────────┐
│ SDK/CLI │────▶│ Ingress │──┐
└─────────────┘ └─────────────┘ │
▼
┌─────────────┐ ┌─────────────────────────┐
│ Server │────▶│ Sandbox │
│ (Control │ │ ┌───────┐ ┌─────────┐ │
│ Plane) │ │ │ execd │ │ egress │ │
└─────────────┘ │ └───────┘ └─────────┘ │
└─────────────────────────┘
Components
| Component | Description | Details |
|---|---|---|
| Server | FastAPI-based lifecycle control plane. Creates, monitors, and terminates sandboxes across Docker and Kubernetes. | Python, REST API |
| Execd | In-sandbox execution daemon. Provides HTTP APIs for shell commands, file operations, PTY sessions, and code interpreters. | Go, Gin framework |
| Ingress | HTTP/WebSocket reverse proxy for Kubernetes sandbox routing. Routes traffic to sandbox instances via header or URI mode. | Go |
| Egress | Per-sandbox FQDN-based egress control sidecar. Enforces allowlists, credential injection, and network policy. | Go |
Related
- Architecture Overview — How components fit together
- Kubernetes Deployment — Deploying components on Kubernetes
- API Specs — OpenAPI specifications