Sandbox · Architecture
imp-sandbox
imp-sandbox architecture
Sandbox controller reconciles Sandbox CRs into ImpVM resources, with gateway enforcing per-sandbox token and egress, and Cilium enforcing hard tenancy.
TENANT
SANDBOX CTRL
IMP CORE
CREATE
ImpVM
token + egress
hard: CNP + CEW
ACTOR
User
applies Sandbox CR
CONTROLLER
imp-sandbox
reconciles tenants
CR
Sandbox CR
standard · hard
CORE
ImpVM / ImpNetwork
Imp runtime
GATEWAY
Gateway data-plane
per-sandbox token
Cilium
LEGEND
CR create
ImpVM via controller
Gateway / Cilium policy