wehub-resource-sync
e0e362d700
SDK Tests / changes (push) Successful in 2m29s
Real E2E Tests / changes (push) Successful in 2m29s
Deploy Docs Pages / build (push) Has been cancelled
Deploy Docs Pages / deploy (push) Has been cancelled
Real E2E Tests / JavaScript E2E (docker bridge) (push) Has been cancelled
Real E2E Tests / Python E2E (docker bridge) (push) Has been cancelled
Real E2E Tests / Java E2E (docker bridge) (push) Has been cancelled
Real E2E Tests / C# E2E (docker bridge) (push) Has been cancelled
Real E2E Tests / Go E2E (docker bridge) (push) Has been cancelled
Real E2E Tests / Real E2E CI (push) Has been cancelled
SDK Tests / SDK CI (push) Has been cancelled
SDK Tests / CLI Tests (push) Has been cancelled
SDK Tests / Python SDK Quality (code-interpreter) (push) Has been cancelled
SDK Tests / Python SDK Quality (sandbox) (push) Has been cancelled
SDK Tests / Python SDK Tests (code-interpreter) (push) Has been cancelled
SDK Tests / JavaScript SDK Quality And Tests (code-interpreter) (push) Has been cancelled
SDK Tests / JavaScript SDK Quality And Tests (sandbox) (push) Has been cancelled
SDK Tests / Python SDK Tests (sandbox) (push) Has been cancelled
SDK Tests / CLI Quality (push) Has been cancelled
SDK Tests / Kotlin SDK Quality And Tests (sandbox) (push) Has been cancelled
SDK Tests / Kotlin SDK Quality And Tests (code-interpreter) (push) Has been cancelled
SDK Tests / C# SDK Quality And Tests (code-interpreter) (push) Has been cancelled
SDK Tests / C# SDK Quality And Tests (sandbox) (push) Has been cancelled
SDK Tests / Go SDK Quality And Tests (push) Has been cancelled
39 lines
2.1 KiB
Markdown
39 lines
2.1 KiB
Markdown
---
|
|
title: Components
|
|
description: Overview of OpenSandbox system components — server, execd, ingress, and egress.
|
|
---
|
|
|
|
# Components
|
|
|
|
OpenSandbox is composed of several system components that work together to provide sandbox lifecycle management, in-sandbox execution, and network control.
|
|
|
|
## Architecture
|
|
|
|
```
|
|
┌─────────────┐ ┌─────────────┐
|
|
│ SDK/CLI │────▶│ Ingress │──┐
|
|
└─────────────┘ └─────────────┘ │
|
|
▼
|
|
┌─────────────┐ ┌─────────────────────────┐
|
|
│ Server │────▶│ Sandbox │
|
|
│ (Control │ │ ┌───────┐ ┌─────────┐ │
|
|
│ Plane) │ │ │ execd │ │ egress │ │
|
|
└─────────────┘ │ └───────┘ └─────────┘ │
|
|
└─────────────────────────┘
|
|
```
|
|
|
|
## Components
|
|
|
|
| Component | Description | Details |
|
|
|-----------|-------------|---------|
|
|
| [Server](/components/server) | FastAPI-based lifecycle control plane. Creates, monitors, and terminates sandboxes across Docker and Kubernetes. | Python, REST API |
|
|
| [Execd](/components/execd) | In-sandbox execution daemon. Provides HTTP APIs for shell commands, file operations, PTY sessions, and code interpreters. | Go, Gin framework |
|
|
| [Ingress](/components/ingress) | HTTP/WebSocket reverse proxy for Kubernetes sandbox routing. Routes traffic to sandbox instances via header or URI mode. | Go |
|
|
| [Egress](/components/egress) | Per-sandbox FQDN-based egress control sidecar. Enforces allowlists, credential injection, and network policy. | Go |
|
|
|
|
## Related
|
|
|
|
- [Architecture Overview](/architecture/) — How components fit together
|
|
- [Kubernetes Deployment](/kubernetes/) — Deploying components on Kubernetes
|
|
- [API Specs](/api/) — OpenAPI specifications
|