TencentCloud / CubeSandbox
agentscontainersandbox
Instant, Concurrent, Secure & Lightweight Sandbox for AI Agents.
9.9k Stars
visibility105 Watchers
fork_right970 Forks
Rust
historyUpdated recently
description README.md
CubeSandbox
Instant, Concurrent, Secure & Lightweight Sandbox Service for AI Agents
中文文档 · Quick Start · Documentation · Changelog · X(Twitter) · End User Program
Cube Sandbox is a high-performance, out-of-the-box secure sandbox service built on RustVMM and KVM. It supports both single-node deployment and easy scaling to multi-node clusters. It is compatible with the E2B SDK and can create a hardware-isolated, fully serviceable sandbox in under 60ms with less than 5MB of memory overhead.
📰 News
|
v0.5: AutoPause, Terraform deployer, ARM64 & network policy hardening AutoPause/AutoResume — idle sandboxes auto-suspend and wake on the next request. Terraform one-click cluster deploy ARM64 native full-stack support network policy hardening — per-sandbox traffic tokens, policy-routing egress. Changelog → · Terraform deploy → |
|
v0.4: Safer egress, easier ops Credential vault — Agents call external APIs as usual; keys never enter the sandbox. Dashboard — version matrix and template health checks; see at a glance whether templates need rebuilding after upgrades. Changelog → · Security proxy guide → · WebUI guide → |
|
Snapshot, Clone & Rollback at hundred-millisecond granularity CubeSandbox 0.3.0 introduces the CubeCoW Copy-on-Write snapshot engine, enabling event-level snapshots, instant cloning, and rollback to any saved state. Changelog → |
|
🎉 Initial open-source release Cube Sandbox is now open source! Millisecond boot, hardware-level isolation, E2B-compatible sandbox for AI Agents. Changelog → |
Product Highlights
|
⚡ Sub-60ms boot · High density · Auto pause/resume Average <60ms cold start, <5MB overhead per instance — run thousands of Agents on one node. Supports automatic sandbox pause and resume for cost optimization Quick start → |
🔒 Hardware-level isolation Each sandbox gets its own Guest OS kernel — no Docker shared-kernel escapes; run untrusted LLM-generated code safely Architecture → |
🔌 Seamless E2B migration Native E2B SDK compatibility — swap one URL env var, zero business code changes Examples → |
|
🖥️ Web console Manage sandboxes, templates, nodes, and version matrix in the browser — open :12088 right after installWebUI guide → |
🔐 Credential vault Agents call LLMs and external APIs as usual — keys never enter the sandbox, model context, or logs Security proxy guide → |
🛡️ Egress control Domain allowlists, instant block on unauthorized egress, full audit logs for compliance Security proxy guide → |
|
📸 Snapshot · Clone · Rollback Hundred-millisecond checkpoints on running sandboxes — roll back or fork from any saved state v0.3 changelog → |
📦 Template system Turn OCI images into templates in one step, install official presets from the Template Store, auto-distribute across nodes |