Modal launches Sidecars sandbox trust boundary
Start here
Modal releases Sidecars, a container that runs on the same host as the main Sandbox but remains isolated, used to establish a security boundary between trusted and untrusted code. Sidecars use the same isolation mechanism as the main Sandbox (gVisor or VM), communicate via TCP/UDP over an internal bridged network and are addressed by name. Official benchmarks show communication speed is at least 3x faster than standalone Sandboxes in the same region, with p50 single communication at 0.58ms versus 2.6ms and p99 at 1.4ms versus 44ms.
Generated by AI from reports · Updated 4 days ago
Progress timeline
- ModalModal launches Sidecars: a low-latency trust boundary for Sandbox
Modal releases Sidecars, a container that runs on the same host as the main Sandbox but remains isolated, used to establish a security boundary between trusted and untrusted code. Sidecars use the same isolation mechanism as the main Sandbox (gVisor or VM), communicate via TCP/UDP over an internal bridged network and are addressed by name. Official benchmarks show communication speed is at least 3x faster than standalone Sandboxes in the same region, with p50 single communication at 0.58ms versus 2.6ms and p99 at 1.4ms versus 44ms. Sidecars are dynamically created by the Modal SDK; code inside the Sandbox cannot create or modify them. A single Sandbox can run up to 250 Sidecars. The two share CPU and memory resources. Each Sidecar has an independent outbound network policy, and Sandbox outbound traffic can also be forced through a proxy Sidecar. Sidecars are currently in Beta.
Related discussion
Attention trend
New sources per day
- Oct 1New1 sources (1 outlets,0 accounts)
- Oct 2New0 sources (0 outlets,0 accounts)
- Oct 3New0 sources (0 outlets,0 accounts)
- Oct 4New0 sources (0 outlets,0 accounts)
- Oct 5New0 sources (0 outlets,0 accounts)
- Oct 6New0 sources (0 outlets,0 accounts)
- Oct 7New0 sources (0 outlets,0 accounts)
- Oct 8New0 sources (0 outlets,0 accounts)
- Oct 9New0 sources (0 outlets,0 accounts)
- Oct 10New0 sources (0 outlets,0 accounts)
- Oct 11New0 sources (0 outlets,0 accounts)
- Oct 12New0 sources (0 outlets,0 accounts)
- Oct 13New0 sources (0 outlets,0 accounts)