mirror of https://github.com/coder/coder.git synced 2026-09-24 15:04:27 +08:00

Files

T

Closes: https://github.com/coder/boundary/issues/146

- added docs for rules engine
- move all boundary-related docs under new `boundary` directory

2026-01-09 15:04:51 -05:00

landjail Jail Type

landjail is Boundary's alternative jail type that uses Landlock V4 for network isolation.

Overview

Boundary uses Landlock V4 to enforce network restrictions:

All bind syscalls are forbidden
All connect syscalls are forbidden except to the port that is used by http proxy

This provides network isolation without requiring network namespace capabilities or special Docker permissions.