- Network isolation - Primary `workspace` container is located in private network with no internet access, HTTPS(443) and SSH(22) traffic goes through Squid Proxy with domain allowlisting functinality that is configured outside of AI agent reach. Proxy is placed within two networks, private and public, enabling indirect internet access for private `workspace` node. Unsafe traffic is being ignored by proxy, for example HTTP.
0 commit comments