Docs

Volcano Engine Function as a Service

Getting started

Getting started with cloud sandbox deployment

This topic describes how to deploy an All-in-One Sandbox application through veFaaS.

Background information

Cloud sandbox: a serverless service built for AI task execution, offering high elasticity, low cost, stateful operation, secure isolation, easy maintenance, and rich features. You can create cloud sandbox environments within seconds based on your business requirements without the need to be concerned about the underlying infrastructure. In inference scenarios, a cloud sandbox provides an AI-driven task execution environment. In training scenarios, such as model Reinforcement Learning (RL) training or Reinforcement Fine-Tuning (RFT) training, a cloud sandbox execution environment supports code execution, enhanced tool calling, and complex task handling.

All-in-One Sandbox: A highly integrated, multifunctional environment for cloud-based development and execution. It packages all the essential tools required for a complete development and interactive process (such as a browser, Shell terminal, file system, VSCode editor, and Python/node.js code execution) into a single cloud sandbox. This provides an out-of-the-box, standardized sandbox environment for automated tasks (especially AI agents), cloud development, and secure code execution. All-in-One Sandbox addresses the pain points of traditional separated tool chains, such as environment inconsistency, cumbersome file transfers, and difficult interaction between add-ons. It delivers a truly integrated and seamless experience.

Considerations

This feature is only supported in the China (Beijing) region.

Prerequisites

An APIG instance of type Serverless has been created. For details, see Creating instances.

An APIG service has been created. For details, see Creating services.

If you use veFaaS for the first time, make sure that the cross-service authorization is complete. If the authorization is not complete, the cross-service authorization page will appear, which provides guidance on authorization.

Procedure

In the top navigation bar, select the target region.

In the left navigation bar, click App > App plaza.

On the App plaza page, select the All-in-One Sandbox template and click Create sandbox app.

On the Create sandbox app page, configure application parameters.

Parameter	Description
Basic information
Name	Specify a custom name for the sandbox application. The sandbox application name must be unique within the same account. The name cannot be modified after being created.
Sandbox image
Container image	The latest All-in-one sandbox image version is selected by default.
Gateway routing configuration
Domain type	The domain type of the sandbox application. Valid values: Unified domain: All the instances in a sandbox application share the same domain name. You can target a specific instance by including the x-faas-instance-name header or the faasInstanceName query parameter in requests. Wildcard domain: [Beta - apply for trial] Each sandbox instance can have a separate access address. For description of sandbox instances, see Sandbox instances.
APIG instance	Select an APIG instance. The sandbox application will use the APIG instance as the traffic entry.
Gateway service	Select the service that corresponds to the APIG instance.
Route name	Specify a custom route name. The route name cannot be modified after being created.
Path	Specify the request path through which the sandbox application can be accessed. Only prefix matching is supported, and the path must start with a forward slash (/).
Environment variables
Environment variables	Configure custom environment variables, which can be directly read during the runtime of the function code. tip If you set the Container image parameter to Custom images, veFaaS will automatically parse the configuration file of the target image to obtain the environment variables for the image. You can modify it if necessary.
Advanced settings	For details, see Function configuration.

Click Confirm to create and deploy the application.

You will be automatically redirected to the application details page, which displays the application deployment logs in real time.

Operation result

After the application is deployed, click the access address below the API gateway ID in the Linked cloud resource section on the application details page to go to the interactive interface of your application.

Last updated: 2026.08.19 14:06:08