Product updates: VM Sandboxes, Lower latency routing, RBAC, and more | Modal Blog

Introduced VM Sandboxes as a new runtime for Sandboxes, offering a full Linux kernel for advanced workloads like eBPF and systemd. Added domain allowlisting for Sandboxes to restrict outbound network connections. Introduced Named Images as the recommended way to handle Image builds in Sandboxes, decoupling image builds from app deployment. Sandbox readiness probes are now generally available. Sandbox Filesystem and Directory Snapshots now support configurable TTLs and timeouts.