network

The network block declares what the agent's outbound HTTP client may do.

network {
  user_agent = runtime("NETWORK_USER_AGENT", "my-agent/1.0")

  headers = {
    "X-Env" = "production"
  }

  limits {
    request_timeout_ms = runtime("NETWORK_REQUEST_TIMEOUT_MS", 5000)
  }

  policy {
    allow = [
      {
        protocol = "https"
        hostname = "api.example.com"
      }
    ]
  }
}

Fields

limits

• connect_timeout_ms is the time allowed to establish a connection.
• read_timeout_ms is the time allowed between response body chunks.
• request_timeout_ms is the deadline for the whole request.
• max_redirects is how many redirects one request may follow.
• max_response_bytes is how many response body bytes are accepted.
• concurrency_limit is how many requests may be in flight at once.

An unset limit is not enforced.

policy

The policy block contains addresses, methods, and allow.

addresses

These permit categories of destination address. The checks apply to every address a host name resolves to. The link-local category is the one covering the cloud instance metadata address.

methods

methods is a set of HTTP method names. When it is unset, methods are unrestricted.

allow

allow is a list of WHATWG URLPattern objects. An empty list means URL patterns are unrestricted. Each pattern uses the protocol, hostname, port, and pathname components. An omitted component matches anything.

Host name patterns

Host name matching follows URLPattern hostname semantics, which are label-aware rather than plain substring matches.

• *.acme.com matches any number of leading labels.
• :sub.acme.com matches exactly one leading label.
• api.acme.com matches both patterns.
• deep.api.acme.com matches *.acme.com, but not :sub.acme.com.
• evilacme.com matches neither pattern, because acme.com is not a separate host label there.

See agentc:http for what component code sees and Control network egress for the step-by-step recipe.