> ## Documentation Index
> Fetch the complete documentation index at: https://docs.celesto.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# InternetSettings

> InternetSettings reference: restrict outbound network access from a Celesto sandbox to an allowlist of domains using the VMConfig internet_settings field.

`InternetSettings` controls outbound network access for supported private sandbox networks. Open access remains the default.

## Import

```python theme={null}
from celesto import InternetSettings
```

## Fields

<ParamField path="mode" type="&#x22;open&#x22; | &#x22;off&#x22; | &#x22;restricted&#x22; | None" default="None">
  Outbound access mode. `open` allows internet access, `off` blocks outbound access, and `restricted` allows only `allowed_cidrs`. Leave unset when using `allowed_domains`.
</ParamField>

<ParamField path="allowed_cidrs" type="tuple[str, ...]" default="()">
  IPv4 addresses and network ranges allowed in `restricted` mode. A bare address is stored as a `/32` range. Overlapping ranges are combined.
</ParamField>

<ParamField path="allowed_domains" type="tuple[str, ...]" default="(&#x22;*&#x22;,)">
  Domains resolved to IPv4 addresses during sandbox setup. URL entries are reduced to their hostname. Do not combine this field with `mode`.
</ParamField>

<ParamField path="allowed_http_methods" type="tuple[str, ...]" default="(&#x22;*&#x22;,)">
  Reserved field. HTTP-method filtering is not supported, so only the default wildcard is accepted.
</ParamField>

Input lists are accepted for collection fields. Stored settings are immutable tuples, while saved JSON uses arrays.

## Turn outbound access off

```python theme={null}
from celesto import InternetSettings, Celesto

with Celesto(
    backend="qemu",
    internet_settings=InternetSettings(mode="off"),
) as vm:
    print(vm.run("echo hello").stdout)
```

QEMU supports off mode with its default network on macOS and Linux.

## Allow IPv4 destinations

```python theme={null}
from pathlib import Path
from celesto import InternetSettings, Celesto, VMConfig

config = VMConfig(
    kernel_path=Path("/path/to/vmlinux"),
    rootfs_path=Path("/path/to/rootfs.ext4"),
    backend="qemu",
    qemu_network="tap",
    internet_settings=InternetSettings(
        mode="restricted",
        allowed_cidrs=["203.0.113.10", "198.51.100.0/24"],
    ),
)

with Celesto(config=config) as vm:
    print(vm.run("echo ready").stdout)
```

QEMU restricted mode requires explicit TAP networking on Linux. Firecracker restrictions require Linux and the `vsock` command channel. See [Network controls](/smolvm/features/network-controls) for the support matrix and higher-level examples.

## Validation

* `restricted` requires at least one entry in `allowed_cidrs`.
* `allowed_cidrs` can only be used with `restricted`.
* IPv6 ranges, sandbox ranges, and link-local ranges are rejected.
* `allowed_domains` cannot be combined with `mode`.
* HTTP-method restrictions are rejected.
* Unknown fields are rejected.

Direct `InternetSettings` and `VMConfig` construction raises Pydantic's `ValidationError`. Public `Celesto` creation methods raise `celesto.ValidationError` for invalid or unsupported combinations.

## Related

* [Network controls](/smolvm/features/network-controls)
* [VMConfig](/smolvm/api/vmconfig)
* [Network configuration](/smolvm/concepts/networking)


## Related topics

- [Network Controls](/smolvm/features/network-controls.md)
- [VMConfig Python reference](/smolvm/api/vmconfig.md)
- [Control internet access for AI agent sandboxes](/cloud/features/network-control.md)
- [Windows sandboxes in Celesto](/smolvm/guides/windows-guests.md)
- [Bridged networking](/smolvm/features/bridged-networking.md)