bubblewrap icon indicating copy to clipboard operation
bubblewrap copied to clipboard

RFE: slirp4netns support

Open gasinvein opened this issue 4 years ago • 1 comments

Using userspace network stack like slirp4netns as an alternative to sharing network namespace could provide a more secure way to connect sandboxed apps to the internet:

  • No abstract sockets leak (#330)
  • No access to the "real" localhost and services listening on it (with --disable-host-loopback) (#340)
  • Apps can't receive incoming connections unless there is explicit port forward (this may be a disadvantage, though)

gasinvein avatar Oct 08 '20 10:10 gasinvein

slirp4netns or another network solution would be nice! Any plans to implement?

pwFoo avatar Dec 28 '20 19:12 pwFoo