feat(sandbox,gateway): route sandbox egress through corporate HTTP proxy#2245

Open

feloy wants to merge 28 commits into

NVIDIA:mainfrom

feloy:fix-1792-corporate-proxy-podman

Commits on Jul 18, 2026

feat(sandbox,gateway): route sandbox egress through corporate HTTP proxy
feloy
committed
fix(sandbox,podman): make corporate proxy routing operator-owned
feloy
committed
feat(sandbox,podman): deliver corporate proxy credentials via secret file
feloy
committed
fix(sandbox,podman): fail closed on invalid upstream proxy configuration
feloy
committed
fix(sandbox,podman): finish the fail-closed upstream proxy credential contract
feloy
committed
fix(sandbox,podman): close remaining fail-open upstream proxy config paths
feloy
committed
fix(sandbox,podman): reject upstream proxy URLs with path, query, or fragment
feloy
committed
fix(sandbox,podman): remove plain-HTTP upstream proxy support
feloy
committed
fix(sandbox,podman): escape generated TOML and require explicit proxy URL form
feloy
committed
fix(sandbox,podman): preserve tunneled bytes read with the CONNECT response
feloy
committed
fix(sandbox,podman): gate cleartext proxy Basic auth behind an explicit opt-in
feloy
committed
fix(sandbox,podman): honor port qualifiers and resolved addresses in NO_PROXY
feloy
committed
fix(sandbox,podman): bind proxied CONNECT tunnels to validated addresses
feloy
committed
fix(sandbox,podman): reject empty port after bracketed IPv6 proxy host
feloy
committed
fix(sandbox,podman): fall back across validated addresses in proxied CONNECT
feloy
committed
fix(sandbox,podman): strip new reserved proxy vars and complete docs/tests
feloy
committed
fix(sandbox,podman): cap each proxied CONNECT attempt within the shared budget
feloy
committed
fix(sandbox,podman): deliver corporate proxy config on the supervisor argv
feloy
committed
docs(sandbox): align proxy comments with the argv transport
feloy
committed
fix(sandbox): parse bracketed IPv6 authorities in client CONNECT targets
feloy
committed
test(podman): cover proxy-auth secret cleanup across lifecycle failures
feloy
committed
docs: list corporate proxy keys in the Podman compute-driver overview
feloy
committed
test(sandbox): cover the SSRF-to-TLS composition across the proxy tunnel
feloy
committed
fix(sandbox,podman): bound proxy-auth reads, reject port 0, fix stale comment
feloy
committed
fix(sandbox): open proxy-auth file non-blocking to reject FIFOs promptly
feloy
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

feat(sandbox,gateway): route sandbox egress through corporate HTTP proxy#2245

feat(sandbox,gateway): route sandbox egress through corporate HTTP proxy#2245
feloy wants to merge 28 commits into
NVIDIA:mainfrom
feloy:fix-1792-corporate-proxy-podman

Commits on Jul 18, 2026

feat(sandbox,gateway): route sandbox egress through corporate HTTP proxy

fix(sandbox,podman): make corporate proxy routing operator-owned

feat(sandbox,podman): deliver corporate proxy credentials via secret file

fix(sandbox,podman): fail closed on invalid upstream proxy configuration

fix(sandbox,podman): finish the fail-closed upstream proxy credential contract

fix(sandbox,podman): close remaining fail-open upstream proxy config paths

fix(sandbox,podman): reject upstream proxy URLs with path, query, or fragment

fix(sandbox,podman): remove plain-HTTP upstream proxy support

fix(sandbox,podman): escape generated TOML and require explicit proxy URL form

fix(sandbox,podman): preserve tunneled bytes read with the CONNECT response

fix(sandbox,podman): gate cleartext proxy Basic auth behind an explicit opt-in

fix(sandbox,podman): honor port qualifiers and resolved addresses in NO_PROXY

fix(sandbox,podman): bind proxied CONNECT tunnels to validated addresses

fix(sandbox,podman): reject empty port after bracketed IPv6 proxy host

fix(sandbox,podman): fall back across validated addresses in proxied CONNECT

fix(sandbox,podman): strip new reserved proxy vars and complete docs/tests

fix(sandbox,podman): cap each proxied CONNECT attempt within the shared budget

fix(sandbox,podman): deliver corporate proxy config on the supervisor argv

docs(sandbox): align proxy comments with the argv transport

fix(sandbox): parse bracketed IPv6 authorities in client CONNECT targets

test(podman): cover proxy-auth secret cleanup across lifecycle failures

docs: list corporate proxy keys in the Podman compute-driver overview

test(sandbox): cover the SSRF-to-TLS composition across the proxy tunnel

fix(sandbox,podman): bound proxy-auth reads, reject port 0, fix stale comment

fix(sandbox): open proxy-auth file non-blocking to reject FIFOs promptly

Commits on Jul 19, 2026

test(podman): cover corporate proxy egress across driver and supervisor

test(podman): restart the gateway on the proxy-config panic path

fix(supervisor-network): derive the loopback proxy bypass from resolved IPs