Using wsnic in Browser Agent v86

[Len4m]

Hi,

First of all, thank you very much for creating and maintaining wsnic. It has been really useful for my project, Browser Agent v86:

https://browseragent.icu/
https://github.com/Len4m/browser-agent-v86-poc

I use wsnic to provide real network connectivity to the Linux VM running inside the browser, allowing both the VM and the AI agent to access Internet resources.

One feature that I think could be very useful would be an option, perhaps related to -i or through a new parameter, to allow Internet access while blocking access to the host's local network. I think this could significantly improve security when the VM runs untrusted or AI-generated commands.

I have a few ideas about how this could be implemented and, if I find some time, I would be very happy to contribute and help develop it.

Thanks again for your work and for making wsnic available to the community.

Best regards,
Manel

[chschnell]

Hi Manel,

thanks for your kind words!

browseragent.icu looks very nice! ¡Felicitaciones! I had been playing around with my own embedding of v86 in the past, but it's outdated now and I no longer maintain it (if you're interested: in the menu, select Machine -> Settings and pick one of the presets to boot it up).

I think prohibiting access to the local network while still allowing internet access should be a matter of proper firewall rules. If I remember correctly I tried to add it, but gave up pretty quickly, I didn't understand enough about it and didn't ever need it myself. But it's obviously a feature that would be really nice to have.

Unfortunately, I cannot really work at the moment (been sick for over 3 months now), so I won't be able to investigate this properly for an unknown time, but a PR would be very welcome.

Best regards,
Christian

[Len4m]

Thanks Christian!

I’ll prepare a PR for this. I noticed a few details that should be handled carefully, especially host access via INPUT, IPv6 as a possible bypass, and source-address spoofing, while keeping communication between wsnic clients unchanged.

I have a few work things to finish first, but I’ll send the PR once I’m done.