CubeSandbox

Instant, Concurrent, Secure & Lightweight Sandbox for AI Agents.

220 articles 7k View on GitHub ↗
220 articles
High-Concurrency API Design Patterns in the CubeAPI REST Gateway

Explore high-concurrency API design patterns in CubeAPI's REST Gateway. Learn how Tencent Cloud's CubeSandbox achieves millions of concurrent requests with Rust async services and advanced proxying.

deep-dive
Jul 16, 2026
How CubeSandbox Supports Live Migration of VM States Between Hosts

CubeSandbox enables live VM migration with a coordinated control plane, hypervisor state machine, and incremental memory transfer using soft-dirty page tracking for minimal downtime.

how-to-guide
Jul 16, 2026
How CubeSandbox Applies Seccomp Filters for System Call Filtering in MicroVM Environments

Learn how CubeSandbox uses seccomp filters to secure MicroVMs. Discover how protobuf messages are converted to OCI seccomp profiles for robust system call filtering. Explore our TencentCloud/CubeSandbox repository.

deep-dive
Jul 16, 2026
How Soft Dirty Pages Enable Efficient Incremental Snapshots in CubeSandbox

Discover how CubeSandbox's soft dirty pages optimize incremental snapshots by tracking memory modifications and creating efficient deltas for enhanced performance.

internals
Jul 16, 2026
Virtio VSOCK Device Implementation in CubeSandbox: Enabling Secure VM-Host Communication

Learn how CubeSandbox implements the Virtio VSOCK device to enable secure VM-host communication, bridging guest VM sockets to host UNIX-domain sockets for efficient data transfer.

internals
Jul 16, 2026
Sandbox Migration with Cross-Node Pause and Resume in CubeSandbox: A Complete Guide

Master sandbox migration with cross-node pause and resume in CubeSandbox. Learn how to serialize, stream, and resume VM states for seamless transitions. Get your complete guide now.

migration-guide
Jul 16, 2026
How Per-Sandbox Traffic Tokens Harden Network Policies in CubeSandbox

Discover how CubeSandbox uses per-sandbox traffic tokens and policy routing to harden network policies. Learn how CubeProxy enforces cryptographic gates for secure access.

how-to-guide
Jul 16, 2026
Multi-Node Resource Scheduling Mechanisms in CubeMaster: Filter, Score, and Select

Discover CubeMaster's multi-node scheduling: filter healthy nodes, score resources via weighted averages, and select the best host with randomized selection for efficient orchestration.

deep-dive
Jul 16, 2026
How Cubelet Manages the Local Sandbox Lifecycle in CubeSandbox

Discover how Cubelet orchestrates the local sandbox lifecycle, managing creation, execution, pausing, resuming, and cleanup with local storage pools, Redis state tracking, and lifecycle plugins.

internals
Jul 16, 2026
How to Perform One-Click Cluster Provisioning with CubeSandbox Terraform Deployment

Unlock one-click cluster provisioning with CubeSandbox Terraform deployment. Automate Tencent Cloud environment setup, including VPC, TKE cluster, and workloads, via a single terraform apply command.

how-to-guide
Jul 16, 2026
How to Achieve Native Full-Stack ARM64 Deployment with CubeSandbox

Achieve native full-stack ARM64 deployment with CubeSandbox v0.5.0. Run hypervisor, CubeShim, and guest agents directly on ARM bare-metal, leveraging KVM acceleration.

how-to-guide
Jul 16, 2026
How to Convert OCI Images to CubeSandbox Templates: A Complete Guide

Easily convert OCI images to CubeSandbox templates with our comprehensive guide. Learn how CubeSandbox streams, decompresses, and packages layers for efficient template creation.

how-to-guide
Jul 16, 2026
…

Have a question about this repo?

These articles cover the highlights, but your codebase questions are specific. Give your agent direct access to the source. Share this with your agent to get started:

Share the following with your agent to get started:
curl -s "https://instagit.com/install.md"
Works with
Claude Codex Cursor VS Code OpenClaw Any MCP Client

Maintain an open-source project? Get it listed too →