Engineering Insights

Run Docker containers inside Vercel Sandbox

now supports installing and running Docker inside a sandbox. An agent can build containers, install system packages, and modify files without touching your host system.Vercel Sandbox Install Docker, start the daemon, and serve a containerized application: Docker in a Sandbox is useful for running containerized services like Redis or Postgres as test dependencies, validating container images before deploying, or previewing applications served from a container. Combined with , the Docker installat

Profiling in PyTorch (Part 1): A Beginner's Guide to torch.profiler

A shared playbook for trustworthy third party evaluations

OpenAI shares guidance on third-party AI evaluations, covering how to assess model capabilities, safeguards, and validity for frontier systems.

What’s new in two: May 2026 edition

Welcome back to “What’s new in two,” your quick hit of Redis releases you might’ve missed over the last month. If your backlog has been winning lately, no worries—we’ve got the recap. We’re covering the biggest updates from May and expanding on what I...

Logs - Updated fields across multiple Logpush datasets in Cloudflare Logs

Cloudflare has updated Logpush datasets: Updated fields in existing datasets DEX Device State Events (added): DeviceRegistrationProfileID. Gateway HTTP (added): AddedHeaders, DeletedHeaders, and SetHeaders. HTTP requests (added): MatchedRules. For the complete field definitions for each dataset, refer to Logpush datasets.

Radar - TLS bug detection in the Cloudflare Radar post-quantum checker

The Radar post-quantum TLS support checker now also reports TLS bugs detected during the handshake test. When a scanned host exhibits compatibility issues, the results include details on the specific bugs detected, along with guidance on how to investigate and remediate each issue. The bugs section only appears for hosts where issues are found. The following TLS bugs are detected: Split ClientHello — The connection fails with a fragmented post-quantum ClientHello but succeeds with classical hand

Realtime - Cloudflare's Realtime WebSocket adapter now auto-reconnects and buffers WebRTC media

Cloudflare Realtime SFU is a WebRTC Selective Forwarding Unit that runs on Cloudflare's global network, so you can route live audio, video, and data between WebRTC clients around the world without managing SFU infrastructure or regions. When you use the WebSocket adapter to stream WebRTC media to a WebSocket endpoint, the adapter now auto-reconnects and buffers audio and video after brief endpoint disconnects or restarts. Streaming WebRTC media to WebSocket endpoints Many teams also use Realtime

Agents - Share sandbox previews through Cloudflare Tunnel

Sandboxes can expose a service running inside the container on a public preview URL through the sandbox.tunnels namespace. The SDK uses cloudflared inside the sandbox so you can share a running service without configuring exposePort() or a custom domain. By default, sandbox.tunnels.get(port) creates a quick tunnel on a zero-config *.trycloudflare.com URL — no Cloudflare account, DNS record, or custom domain required. This is perfect for quick development and for .workers.dev deployments. JavaSc