Skip to main content
Expose a host Unix socket or local Windows named pipe to a sandbox over virtio-vsock. See VSock for guest connection details, platform support, and security considerations.
VSock routes are local-only and unavailable with the multi-tenant deployment profile.

Typical flow

Sandbox.create()

A mapping creates stream routes. Use typed VsockRoute values for datagram routes or when the socket type should be explicit.

VsockRoute

Frozen route configuration imported from microsandbox. Datagram routes are unavailable on Windows. Host paths must be absolute, and each socket type and port pair must be unique.

VsockSocketType

String enum imported from microsandbox.