{"slug": "secure-fast-and-extensible-sandbox-runtime-for-ai-agents", "title": "Secure, Fast, and Extensible Sandbox Runtime for AI Agents", "summary": "Tencent Cloud has open-sourced Cube Sandbox, a high-performance secure sandbox runtime for AI agents built on RustVMM and KVM that creates hardware-isolated sandboxes in under 60ms with less than 5MB of memory overhead. The v0.6 release adds Kubernetes deployment, an E2B-compatible volume framework, and template aliases, while the project supports snapshot, clone, and rollback at hundred-millisecond granularity via its CubeCoW engine.", "body_md": "**Instant, Concurrent, Secure & Lightweight Sandbox Service for AI Agents**\n\n[ 中文文档](/TencentCloud/CubeSandbox/blob/master/README_zh.md) ·\n\n[·](/TencentCloud/CubeSandbox/blob/master/docs/guide/quickstart.md)\n\n**Quick Start**[·](/TencentCloud/CubeSandbox/blob/master/docs/index.md)\n\n**Documentation**[·](/TencentCloud/CubeSandbox/blob/master/docs/changelog/index.md)\n\n**Changelog**[·](https://x.com/CubeSandbox_AI)\n\n**X(Twitter)**[·](https://github.com/TencentCloud/CubeSandbox/issues/1040)\n\n**Top Contributor Program**\n\n**Submit Use Case** Cube Sandbox is a high-performance, out-of-the-box secure sandbox service built on RustVMM and KVM. It supports both single-node deployment and easy scaling to multi-node clusters. It is compatible with the E2B SDK and can create a hardware-isolated, fully serviceable sandbox in under 60ms with less than 5MB of memory overhead.\n\n|\n|\n\n**v0.6: K8s deploy, Volume framework, template aliases****K8s deploy**— Deploy Cube control-plane components and compute nodes on Kubernetes** Volume framework**— E2B-compatible Volume framework that lets users plug in custom backend storage** Template aliases**— Set an alias when creating a template, and create sandboxes by specifying that alias.[Changelog →](/TencentCloud/CubeSandbox/blob/master/docs/changelog/v0.6.0.md)·[K8s deploy →](/TencentCloud/CubeSandbox/blob/master/docs/guide/kubernetes)·[Volume plugin →](/TencentCloud/CubeSandbox/blob/master/docs/guide/volume-plugin.md)**v0.5: AutoPause, Terraform deployer, ARM64 & network policy hardening****AutoPause/AutoResume**— idle sandboxes auto-suspend and wake on the next request.** Terraform one-click cluster deploy****ARM64** native full-stack support**network policy hardening**— per-sandbox traffic tokens, policy-routing egress.[Changelog →](/TencentCloud/CubeSandbox/blob/master/docs/changelog/v0.5.0.md)·[Terraform deploy →](/TencentCloud/CubeSandbox/blob/master/docs/guide/tencentcloud-terraform-deploy.md)**v0.4: Safer egress, easier ops****Credential vault**— Agents call external APIs as usual; keys never enter the sandbox.** Dashboard**— version matrix and template health checks; see at a glance whether templates need rebuilding after upgrades.[Changelog →](/TencentCloud/CubeSandbox/blob/master/docs/changelog/v0.4.0.md)·[Security proxy guide →](/TencentCloud/CubeSandbox/blob/master/docs/guide/security-proxy.md)·[WebUI guide →](/TencentCloud/CubeSandbox/blob/master/docs/guide/webui.md)**Snapshot, Clone & Rollback at hundred-millisecond granularity** CubeSandbox 0.3.0 introduces the\n\n**CubeCoW** Copy-on-Write snapshot engine, enabling event-level snapshots, instant cloning, and rollback to any saved state.[Changelog →](/TencentCloud/CubeSandbox/blob/master/docs/changelog/v0.3.0.md)**🎉 Initial open-source release** Cube Sandbox is now open source! Millisecond boot, hardware-level isolation, E2B-compatible sandbox for AI Agents.\n\n[Changelog →](/TencentCloud/CubeSandbox/blob/master/docs/changelog/v0.1.0.md)\n⚡ Ultra-fast StartupResource pooling and snapshot cloning skip all cold-start overhead. Average <60ms cold start — sandbox creation faster than a blink.\n|\n🔒 Hardware IsolationEvery sandbox runs a dedicated OS kernel in its own MicroVM.\n|\n🔌 E2B SDK CompatibleCompatible with E2B SDK interface. Switch from E2B Cloud seamlessly by changing one environment variable — zero client code changes.\n|\n📦 High-density Deployment<5MB overhead per sandbox enables thousands of instances per server via kernel sharing and Copy-on-Write (CoW). Supports automatic sandbox pause and resume, further improving deployment density and cost optimization.\n|\n🛡️ Network SecurityeBPF-based inter-sandbox isolation and egress filtering at kernel level; built-in L7 security proxy enables per-domain/path/method policies with automatic credential injection — secrets never visible to sandbox code.\n|\n📸 Flexible State ManagementHigh-frequency snapshot and rollback at hundred-millisecond granularity. Create checkpoints on running sandboxes, roll back to any saved state at any time, or fork from a specific state to explore in parallel.\n|\n💾 Volume FrameworkE2B-compatible Volume framework that lets users plug in custom backend storage solutions. Volumes have an independent lifecycle and can be shared across sandboxes.\n|\n🚀 Production DeploymentDeploy production clusters on Tencent Cloud with one click using Terraform. Also supports deployment on standard Kubernetes clusters (preview).\n|\n💪 ARM Architecture SupportFull native ARM64 support across compilation, build, and deployment workflows.\n|\n\n## 1.cubesandbox.-.mp4 |\n## 2.cubesandbox.demo.mp4 |\n## Cube-Sandbox.RL.demo.mp4 |\n## 5.cube.V0.3.0.-.-.mp4 |\nInstallation & Demo\n|\nPerformance Test\n|\nRL (SWE-Bench)\n|\nSnapshot · Clone · Rollback\n|\n\nIn the context of AI Agent code execution, CubeSandbox achieves the perfect balance of security and performance:\n\n| Metric | Docker Container | Traditional VM | CubeSandbox |\n|---|---|---|---|\nIsolation Level |\nLow (Shared Kernel Namespaces) | High (Dedicated Kernel) | Extreme (Dedicated Kernel + eBPF) |\nBoot Speed *Full-OS boot duration |\n200ms | Seconds | Sub-millisecond (<60ms) |\nMemory Overhead |\nLow (Shared Kernel) | High (Full OS) | Ultra-low (Aggressively stripped, <5MB) |\nDeployment Density |\nHigh | Low | Extreme (Thousands per node) |\nE2B SDK Compatible |\n/ | / | ✅ Drop-in |\n\n*Cold start benchmarked on bare-metal. 60ms at single concurrency; under 50 concurrent creations, avg 67ms, P95 90ms, P99 137ms — consistently sub-150ms.**Memory overhead measured with sandbox specs ≤ 32GB. Larger configurations may see a marginal increase.*\n\nFor detailed metrics on startup latency and resource overhead, see the [Core Operations Performance Benchmark Report](/TencentCloud/CubeSandbox/blob/master/docs/blog/posts/2026-06-01-cubesandbox-perf-benchmark.md) (bare metal) and the [PVM Cloud Server Benchmark Report](/TencentCloud/CubeSandbox/blob/master/docs/blog/posts/2026-06-03-cubesandbox-perf-benchmark-pvm.md).\n\n*⚡ Millisecond-level startup — watch the fast-start flow above.*\n\nCube Sandbox requires an **x86_64 Linux** environment with **KVM** support.\n\nThe guide walks you through everything in **four steps** — provisioning a server, installing Cube Sandbox, creating a sandbox template, and running your first agent code. No source build needed, up and running in minutes.\n\n**Choose your deployment path:**\n\n|\n🏆 Recommended |\n\n[🏗 Bare Metal →](/TencentCloud/CubeSandbox/blob/master/docs/guide/bare-metal-deploy.md)[💻 Dev-Env →](/TencentCloud/CubeSandbox/blob/master/docs/guide/dev-environment.md)⚠️ **Not recommended — poor performance**\n*🖥️ Visual management — from overview to creating a sandbox and streaming logs, all in your browser.*\n\nAfter one-click deployment, open in your browser:\n\n```\nhttp://<control-node IP>:12088\n```\n\n**Recommended three steps:**\n\n**Check overview**— Open** Overview**, confirm nodes are Ready and capacity looks healthy** Prepare a template**— Install an official preset from** Template Store**; skip if you already have a`READY`\n\ntemplate under**Templates****Create a sandbox**—** Sandboxes → + New sandbox**, pick a`READY`\n\ntemplate, and view live logs on the detail page within seconds\n\nSee the full [WebUI console guide](/TencentCloud/CubeSandbox/blob/master/docs/guide/webui.md).\n\n[Documentation Home](/TencentCloud/CubeSandbox/blob/master/docs/index.md)— complete guide navigation- ☁️\n[PVM Deployment](/TencentCloud/CubeSandbox/blob/master/docs/guide/pvm-deploy.md)— deploy on ordinary cloud VMs without bare metal or nested virtualization [Template Concepts](/TencentCloud/CubeSandbox/blob/master/docs/guide/templates.md)— image-to-template concepts and workflows[Example Projects](/TencentCloud/CubeSandbox/blob/master/docs/guide/tutorials/examples.md)— hands-on examples (code execution, browser automation, OpenClaw integration, RL training, and more)- 🖥️\n[WebUI Console](/TencentCloud/CubeSandbox/blob/master/docs/guide/webui.md)— visual management right after install (`:12088`\n\n) - 🔐\n[Security Proxy & Credential Vault](/TencentCloud/CubeSandbox/blob/master/docs/guide/security-proxy.md)— CubeEgress domain filtering, injection, and auditing - 🤖\n[Digital Assistant AgentHub](/TencentCloud/CubeSandbox/blob/master/docs/guide/digital-assistant.md)— create and manage OpenClaw assistants (Preview) - 💻\n[Development Environment (QEMU VM)](/TencentCloud/CubeSandbox/blob/master/docs/guide/dev-environment.md)— no KVM access? Try Cube Sandbox inside a disposable OpenCloudOS 9 VM\n\n| Component | Responsibility |\n|---|---|\nCubeAPI |\nHigh-concurrency REST API Gateway (Rust), compatible with E2B. Swap the URL for seamless migration. |\nCubeMaster |\nCluster orchestrator. Receives API requests and dispatches them to corresponding Cubelets. Manages resource scheduling and cluster state. |\nCubeProxy |\nReverse proxy, compatible with the E2B protocol, routing requests to the appropriate sandbox instances. |\nCubelet |\nCompute node local scheduling component. Manages the complete lifecycle of all sandbox instances on the node. |\nCubeVS |\neBPF-based virtual switch, providing kernel-level network isolation and security policy enforcement. |\nCubeEgress |\nOpenResty-based egress security gateway: L7 domain filtering, credential injection, and access auditing; works with CubeVS kernel policies so sandbox traffic cannot bypass inspection. |\nCubeHypervisor & CubeShim |\nVirtualization layer — CubeHypervisor manages KVM MicroVMs, CubeShim implements the containerd Shim v2 API to integrate sandboxes into the container runtime. |\n\n👉 For more details, please read the [Architecture Design Document](/TencentCloud/CubeSandbox/blob/master/docs/architecture/overview.md) and [CubeVS Network Model](/TencentCloud/CubeSandbox/blob/master/docs/architecture/network.md).\n\nWe welcome contributions of all kinds—whether it's a bug report, feature suggestion, documentation improvement, or code submission!\n\n- 🐞\n**Found a Bug or have questions?** Submit an issue on[GitHub Issues](https://github.com/tencentcloud/CubeSandbox/issues). - 💡\n**Have an Idea?** Join the conversation in[GitHub Discussions](https://github.com/tencentcloud/CubeSandbox/discussions). - 🛠️\n**Want to Code?** Check out our[CONTRIBUTING.md](/TencentCloud/CubeSandbox/blob/master/CONTRIBUTING.md)to learn how to submit a Pull Request. - 📝\n**Want to contribute docs?** Submit bilingual PRs to our community doc channels:[Troubleshooting](/TencentCloud/CubeSandbox/blob/master/docs/guide/troubleshooting/index.md),[Use Cases](/TencentCloud/CubeSandbox/blob/master/docs/guide/usecases/index.md), and[Integrations](/TencentCloud/CubeSandbox/blob/master/docs/guide/integrations/index.md). Additionally, the**Cube 100 Program** is now open — we're looking for the first 100 teams running AI agents in production with Cube. Limited to 100 seats.**Learn more & apply →** - 💬\n**Want to Chat?** Join our[Discord](https://discord.gg/kkapzDXShb).\n\n**Coming soon** — see the [full roadmap](/TencentCloud/CubeSandbox/blob/master/docs/guide/roadmap.md) for details.\n\n| Feature | Description |\n|---|---|\nKubernetes-Native Deployment |\nEvolve from Helm-based deployment toward CRD- and Operator-centric native management, with smooth upgrade capabilities |\nCross-Node Pause & Resume |\nSuspend a sandbox on one node and resume it on another with full memory and filesystem state preserved |\nE2B API Compatibility |\nClose remaining gaps with the E2B specification for full drop-in compatibility |\nControl Plane / Data Plane Separation |\nDecouple the control plane from the data plane so control plane upgrades or failures never affect sandboxes already in flight |\nSandbox Fault Recovery |\nAutomatic detection and recovery of crashed VMs, stuck shim processes, and network partitions with configurable recovery policies |\nScheduling & Operations Enhancements |\nResource-aware placement, affinity rules, live rebalancing, and node drain with sandbox migration |\n\nCubeSandbox is released under the [Apache License 2.0](/TencentCloud/CubeSandbox/blob/master/LICENSE).\n\nThe birth of CubeSandbox stands on the shoulders of open-source giants. Special thanks to [Cloud Hypervisor](https://github.com/cloud-hypervisor/cloud-hypervisor), [Kata Containers](https://github.com/kata-containers/kata-containers), virtiofsd, containerd-shim-rs, ttrpc-rust, and others. We have made tailored modifications to some components to fit the CubeSandbox execution model, and the original in-file copyright notices are preserved.\n\nCube Sandbox is listed in the [CNCF Landscape](https://landscape.cncf.io/?landscape=observability-and-analysis&group=ai-native&item=ai-native-infra--workload-runtime--cubesandbox).", "url": "https://wpnews.pro/news/secure-fast-and-extensible-sandbox-runtime-for-ai-agents", "canonical_source": "https://github.com/TencentCloud/CubeSandbox", "published_at": "2026-07-29 18:03:10+00:00", "updated_at": "2026-07-29 18:24:21.312075+00:00", "lang": "en", "topics": ["ai-agents", "ai-infrastructure", "developer-tools", "ai-safety"], "entities": ["Tencent Cloud", "Cube Sandbox", "RustVMM", "KVM", "E2B", "CubeCoW"], "alternates": {"html": "https://wpnews.pro/news/secure-fast-and-extensible-sandbox-runtime-for-ai-agents", "markdown": "https://wpnews.pro/news/secure-fast-and-extensible-sandbox-runtime-for-ai-agents.md", "text": "https://wpnews.pro/news/secure-fast-and-extensible-sandbox-runtime-for-ai-agents.txt", "jsonld": "https://wpnews.pro/news/secure-fast-and-extensible-sandbox-runtime-for-ai-agents.jsonld"}}