Documentation ¶ Overview ¶ Command egressd is the per-VM HTTP CONNECT proxy that is the only egress path for session containers (spec §8). It is default-deny; runnerd pushes per-session allowlists at runtime via a small admin endpoint. Source Files ¶ View all Source files main.go Click to show internal directories. Click to hide internal directories.