What outbound network access does a self-hosted deployment need?
The model endpoints you allow, the connector service if connectors are on, and the release proxy for online installs. Sandbox egress is a posture you set.
A self-hosted deployment reaches out only where you allow it: the model endpoints your policy permits (private endpoints keep that traffic in your network), the connector service hosts if catalog connectors are enabled, and the licensed release proxy for connected installs. Observability stays in the cluster.
What agent sandboxes can reach is a deployment setting: open, a domain allow-list, or workspace-only. Air-gapped installs use side-loaded release bundles and models served inside the boundary, so nothing leaves. The deployment models page maps what crosses which boundary in each mode.
Written for deployment engineers, it and security. Last reviewed 2026-09-15.
Related questions
Still need an answer?
Tell us what you were looking for and we reply within one business day.
Contact the team →Running a security review?
Documents, controls, and the request form live in the Trust Center.
Open the Trust Center →