> This page is for version 0.5.0.
> For other versions, use one of these documentation indexes:
> - Main (default): https://docs.nvidia.com/nemo/gym/main/llms.txt
> - 0.7.0: https://docs.nvidia.com/nemo/gym/v0.7.0/llms.txt
> - 0.6.0: https://docs.nvidia.com/nemo/gym/v0.6.0/llms.txt
> - 0.5.1: https://docs.nvidia.com/nemo/gym/v0.5.1/llms.txt
> - 0.5.0: https://docs.nvidia.com/nemo/gym/v0.5.0/llms.txt
> - 0.4.0: https://docs.nvidia.com/nemo/gym/v0.4.0/llms.txt
> - 0.3.0: https://docs.nvidia.com/nemo/gym/v0.3.0/llms.txt
> - 0.2.1: https://docs.nvidia.com/nemo/gym/v0.2.1/llms.txt

> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.nvidia.com/nemo/gym/llms.txt.

# nemo_gym.utils.network_policy

Egress rules that limit a sandbox to a few hosts, for agents and for resources servers that lend a sandbox.

## Module Contents

### Functions

| Name                                                                                    | Description                                                                                             |
| --------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------- |
| [`reachable_host`](#nemo_gym-utils-network_policy-reachable_host)                       | Return the host of `url`, or raise `ValueError` if a remote sandbox cannot reach it (loopback or none). |
| [`restricted_network_policy`](#nemo_gym-utils-network_policy-restricted_network_policy) | Fail closed when a provider or endpoint cannot support network isolation.                               |

### API

```python
nemo_gym.utils.network_policy.reachable_host(
    url: str
) -> str
```

Return the host of `url`, or raise `ValueError` if a remote sandbox cannot reach it (loopback or none).

```python
nemo_gym.utils.network_policy.restricted_network_policy(
    provider_name: str,
    urls: list[str]
) -> dict[str, object]
```

Fail closed when a provider or endpoint cannot support network isolation.