Your sandbox can now serve requests
A sandbox that can answer inbound connections without opening ports, and without routing every byte through a central proxy. How Tailcat NAT traversal works, and how it compares with frp and ngrok.
FROM BOXCOMPUTE
The BoxCompute blog
Notes on the technology behind agent workspaces. Virtualization, infrastructure, and the boundaries that make them work.
Full Linux VMs for your agents — VM Sandboxes
VM Sandboxes give agents a full Linux VM with root, outbound internet, and no fixed lifetime. Here is what changed and how to start using them.
I got frustrated with AWS, so we built our own sandbox
At my previous company, a healthcare startup, I gave a LangGraph agent a sandbox to analyze data on its own. That experiment, and a regional availability problem, became the starting point for BoxCompute.
Why we chose KubeVirt for our VM sandboxes
We needed full Linux machines without a separate VM management platform. Why KubeVirt fit BoxCompute, and the tradeoffs we accept.
KubeVirt, VSOCK, and eBPF: who does what?
A beginner’s guide to virtual machines, host–guest communication, and where eBPF can enforce isolation.