HF RL Explorer

Per-sandbox L2 network isolation via point-to-point TAP interfaces

Per-sandbox L2 network isolation via point-to-point TAP interfaces: a task in LegoFlow-SWE (Harbor dataset). The networking layer uses a single shared kernel bridge to connect all sandbox VMs. This means every sandbox can see the L2 traffic of every other sandbox — there is no isolation between…

The task

The networking layer uses a single shared kernel bridge to connect all sandbox VMs. This means every sandbox can see the L2 traffic of every other sandbox — there is no isolation between them. The setup also relies on iptables MASQUERADE rules and a shared bridge interface.

Part of Lego-X/LegoFlow-SWE.