FROM BOXCOMPUTE
Notes on the technology behind agent workspaces. Virtualization, infrastructure, and the boundaries that make them work.
Five AI agent sandboxes compared on start time, session limits, what survives a stop, regions in Asia, desktops and price, with sources for every claim and where BoxCompute is slower.
A sandbox that can answer inbound connections without opening ports, and without routing every byte through a central proxy. How Tailcat NAT traversal works, and how it compares with frp and ngrok.
VM Sandboxes give agents a full Linux VM with root, outbound internet, and no fixed lifetime. Here is what changed and how to start using them.
At my previous company, a healthcare startup, I gave a LangGraph agent a sandbox to analyze data on its own. That experiment, and a regional availability problem, became the starting point for BoxCompute.
We needed full Linux machines without a separate VM management platform. Why KubeVirt fit BoxCompute, and the tradeoffs we accept.
A beginner’s guide to virtual machines, host–guest communication, and where eBPF can enforce isolation.