Arrakis: Networking

Each sandbox in Arrakis runs in a MicroVM (virtual machine) with its own isolated networking. The networking setup uses a combination of:

1. Tap Devices: Each sandbox gets a unique tap network device
2. Linux Bridge: All tap devices are connected to a Linux bridge on the host
3. Port Forwarding: Automatic port forwarding from the host to the sandbox

Arrakis Guest
Code
VNC
Linux Bridge br0
tap
cloud-hypervisor VMM process
Arrakis Server
Userspace
Kernel