Browser Use 如何构建安全可扩展的 Agent 沙箱基础设施
Browser Use 分享了其 Agent 沙箱架构的演进:从最初在 AWS Lambda 上运行浏览器智能体,到把整个智能体放进沙箱、通过控制平面持有全部凭证的 Pattern 2。生产环境每个智能体运行在独立的 Unikraft micro-VM 中,启动不到一秒,仅接收 SESSION_TOKEN、CONTROL_PLANE_URL 和 SESSION_ID 三个环境变量,本地开发和评测则用同一镜像跑 Docker 容器。控制平面作为无状态 FastAPI 代理,统一处理 LLM 调用、S3 文件同步和计费,代价是每次操作多一次网络跳转。

isioning code takes. Unikraft in production Each agent gets its own Unikraft micro-VM, booting in under a second. We provision them via Unikraft Cloud's REST API on dedicated bare metal machines in AWS. The sandbox receives only three env variables from the outside world: SESSION TOKEN, CONTROL PLANE URL, and SESSION ID. No AWS keys, no database credentials, no API tokens. Unikraft gives us scale-to-zero out of the box. When a sandbox is idle, the VM suspends. When the next request comes in, it
匹配字段正文





