FEATURE: Add [egress].mode (dns | dns+nft, default dns); wire to sidecar as OPENSANDBOX_EGRESS_MODE on both Docker and Kubernetes.#501

Merged

Pangjiping merged 2 commits intoalibaba:mainfrom

Pangjiping:feat/egress-config

Mar 20, 2026

Commits on Mar 20, 2026

feat(server): configure egress enforcement mode and centralize sidecar env names
Pangjiping
committed
fix(server): run egress sidecar privileged with sysctl bootstrap; drop unused IPv6 sysctl helper
Pangjiping
committed