set_egress_allowlist#

SandboxRuntime.set_egress_allowlist(instance_id: str, cidrs: List[str]) → None[source]#

Replace the egress allowlist of a network=”public” sandbox.

The new list takes effect for the next packet of every flow; flows it no longer permits stall rather than being reset. No list opens the denylist; ALLOW_ALL_CIDRS opens everything else, private networks and any Ray node on them included.

Parameters:

  • instance_id (str) – Unique identifier of the sandbox instance.

  • cidrs (List[str]) – The new allowlist, in the forms cidr_allowlist takes.