OpenSandbox

vdocker/egress/v1.0.12 Bugfix

This release fixes issues for SREs watching stability and regressions.

Published 2mo Containers & Orchestration

✓ No known CVEs patched

✓ No known CVEs patched in this version

Topics

ai ai-agent ai-infra kubernetes sandbox

Summary

AI summary

Fixed SSE and chunked streaming stutter caused by buffering under 1 MiB in mitmproxy.

Full changelog

Unblock SSE / chunked streaming through mitmproxy. The --set stream_large_bodies=1m flag (added to prevent OOM on large downloads) buffered any response under 1 MiB before forwarding, stalling LLM SSE and chunked streams of small chunks until the stream ended or the threshold was hit — producing perceptible stutter downstream. Introduces a bundled system addon, always loaded by the egress launcher, that forces flow.response.stream = True for responses with content-type: text/event-stream or transfer-encoding: chunked. Large-body OOM protection from stream_large_bodies stays intact for everything else. The previous example script add_header.py is renamed to system.py and repurposed as the always-on system addon (wire-transparent: no headers added or altered). User-supplied addons via OPENSANDBOX_EGRESS_MITMPROXY_SCRIPT are still loaded after the system addon and may observe or override its hooks. (#898)

Thanks to these contributors ❤️

Docker Hub: opensandbox/egress:v1.0.12
Aliyun Registry: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/egress:v1.0.12

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track OpenSandbox

Get notified when new releases ship.

About OpenSandbox

Secure, Fast, and Extensible Sandbox runtime for AI agents.

vpython/sandbox/v0.1.14 Removes `CredentialMatch.ports`; port now derived from scheme.
vjava/sandbox/v1.0.16 Removes CredentialMatch.ports; port derived from scheme instead.
vdocker/egress/v1.1.4 `Match.Ports` field removed from Credential Vault bindings; ports derived from scheme.
vdocker/egress/v1.1.4 'X-Forwarded-Proto' is trusted only from configured proxy CIDRs.
vdocker/egress/v1.1.4 Credential Vault requires `dns+nft` enforcement for egress connections.