# Vercel Sandbox firewall now supports request proxying and filtering

DevFeed: [Vercel Sandbox firewall now supports request proxying and filtering](<https://devfeed.tech/articles/vercel-sandbox-firewall-now-supports-request-proxying-and-filtering-1172.md>)

Original publisher: [Read original article](<https://vercel.com/changelog/vercel-sandbox-firewall-now-supports-request-proxying-and-filtering>)

Author: Brandon Tuttle

Published: 2026-05-11T01:00:00Z

Content type: release

Language: en

Sources: [Vercel News](<https://devfeed.tech/sources/vercel-news.md>)

Topics: [Firewall](<https://devfeed.tech/topics/firewall.md>), [Vercel](<https://devfeed.tech/topics/vercel.md>), [API](<https://devfeed.tech/topics/api.md>), [OpenID connect (OIDC)](<https://devfeed.tech/topics/oidc.md>), [SDKs](<https://devfeed.tech/topics/sdks.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [debugging](<https://devfeed.tech/tags/debugging.md>), [enterprise](<https://devfeed.tech/tags/enterprise.md>), [features](<https://devfeed.tech/tags/features.md>), [firewall](<https://devfeed.tech/tags/firewall.md>), [http](<https://devfeed.tech/tags/http.md>), [identity](<https://devfeed.tech/tags/identity.md>), [oidc](<https://devfeed.tech/tags/oidc.md>), [post](<https://devfeed.tech/tags/post.md>), [responses](<https://devfeed.tech/tags/responses.md>), [sdk](<https://devfeed.tech/tags/sdk.md>), [server](<https://devfeed.tech/tags/server.md>), [vercel](<https://devfeed.tech/tags/vercel.md>)

## AI overview

Vercel Sandbox firewall now supports routing selected outbound HTTPS requests through a user-controlled proxy. Matchers can restrict proxy forwarding and credentials brokering by path, method, query string, or headers. The beta features are available for Pro and Enterprise plans through the @vercel/sandbox@beta SDK.

## Source excerpt

The Vercel Sandbox firewall now supports forwarding specific HTTP requests to a proxy you control. You can also use matchers to filter forwarding and credentials brokering to only the requests that need it. Requests proxying You can now route outbound sandbox traffic through your own proxy for logging, debugging, or transforming requests and responses. Set a forwardURL on any allowed domain, and the firewall will forward matching HTTPS requests to your server. The proxy receives the original request along with additional headers to identify the source: vercel-forwarded-host: The original request's SNI vercel-forwarded-scheme: The original request's scheme vercel-forwarded-port: The original request's port vercel-sandbox-oidc-token: A Vercel-issued OIDC token that the proxy can use to authenticate the request and identity the source team / project / sandbox. Learn more about it in the docs Filtering Additionally, you can now use matchers to filter request forwarding or credentials brokering to requests matching a specific path, method, query string, or headers. This gives you fine-grained control over which requests get transformed; for example, only forwarding POST requests to a specific API path while allowing all other traffic through untouched. These features are available in beta for Pro and Enterprise plans. Get started by installing the @vercel/sandbox@beta SDK, and learn more in the docs about requests proxying and matchers. Read more