BYOC (Bring Your Own Cloud)
BYOC (Bring Your Own Cloud) allows you to deploy E2B sandboxes to your own cloud infrastructure within your VPC.
BYOC is currently only available for AWS and Google Cloud (GCP). We are working on adding support for Azure.
Architecture
Sandbox templates, snapshots, and runtime logs are stored within the customer’s BYOC VPC. Anonymized system metrics such as cluster memory and cpu are sent to the E2B Cloud for observability and cluster management purposes.
All potentially sensitive traffic, such as sandbox template build source files, sandbox traffic, and logs, is transmitted directly from the client to the customer’s BYOC VPC without ever touching the E2B Cloud infrastructure.
Glossary
- BYOC VPC: The customer’s Virtual Private Network where the E2B sandboxes are deployed. For example your AWS account.
- E2B Cloud: The managed service that provides the E2B platform, observability and cluster management.
- OAuth Provider: Customer-managed service that provides user and E2B Cloud with access to the cluster.
BYOC cluster components
- Orchestrator: Represents a node that is responsible for managing sandboxes and their lifecycle. Optionally, it can also run the template builder component.
- Edge Controller: Routes traffic to sandboxes, exposes API for cluster management, and gRPC proxy used by E2B control plane to communicate with orchestrators.
- Monitoring: Collector that receives sandbox and build logs and system metrics from orchestrators and edge controllers. Only anonymized metrics are sent to the E2B Cloud for observability purposes.
- Storage: Persistent storage for sandbox templates, snapshots, and runtime logs. Image container repository for template images.
Onboarding
Customers can initiate the onboarding process by reaching out to us. Customers need to have a dedicated AWS account and know the region they will use. After that, we will receive the IAM role needed for managing account resources. For AWS account quota limits may need to be increased.
Terraform configuration and machine images will be used for provisioning BYOC cluster. When provisioning is done and running, we will create a new project under your E2B account that can be used by SDK/CLI the same way as it is hosted on E2B Cloud.