The limits of a sandbox, of its commands and files, and of an organization, and the network rules.
| Limit | Value |
|---|---|
| vCPUs | 1 to 16 |
| Memory | 512 to 32,768 MiB, in steps of 256 MiB. At least 512 MiB for each vCPU |
| Disk | 10 to 100 GiB, set with disk_gib. The default is 10 |
| Life of a sandbox | 10 to 86,400 seconds. The default is 3,600, one hour |
| Time of a command | 1 to 1,800 seconds. The default is 60 |
| Output of a command | 1 MiB for each stream when you wait for the result. truncated is true when the API cuts the output |
| File | 100 MiB |
| Environment | 100 variables. A value is 32 KiB or less |
| Metadata | 16 keys. A key is 64 characters or less, and a value 512 or less |
| Running sandboxes | 100 at once for each organization. Above this limit, a create gets 429 sandbox_limit_reached. Talk to an engineer for more |
| Creates | No limit. API requests from one IP address are limited to 8,000 a minute |
| Public ports | 16 for each sandbox |
| SSH keys | 16 for each sandbox |
| Signed URL | 60 seconds to 7 days. The default is one hour |
Network
- A sandbox has outbound internet access.
- A sandbox cannot reach your other sandboxes or private addresses. It cannot send mail over SMTP.
- For a sandbox with no network, set
"internet": false. - Inbound connections come only through ports and SSH, also with
"internet": false.