# nsjail jail type

<Callout type="info" title="Note">
  Agent Firewall is part of [AI Governance](/beta-docs/@main/ai-coder/ai-governance/), which is included with a Premium license.
</Callout>

nsjail is Agent Firewall's default jail type that uses Linux namespaces to provide process isolation.
It creates unprivileged network namespaces to control and monitor network access for processes running under Boundary.

**Running on Docker, Kubernetes, or ECS?**
See the relevant page for runtime and permission requirements:

* [nsjail on Docker](/beta-docs/@main/ai-coder/agent-firewall/nsjail/docker/)
* [nsjail on Kubernetes](/beta-docs/@main/ai-coder/agent-firewall/nsjail/k8s/)
* [nsjail on ECS](/beta-docs/@main/ai-coder/agent-firewall/nsjail/ecs/)

## Overview [#overview]

nsjail leverages Linux namespace technology to isolate processes at the network level.
When Agent Firewall runs with nsjail, it creates a separate network namespace for the isolated process, allowing Agent Firewall to intercept and filter all network traffic according to the configured policy.

This jail type requires Linux capabilities to create and manage network namespaces, which means it has specific runtime requirements when running in containerized environments like Docker and Kubernetes.

## Architecture [#architecture]

<img width="1228" height="604" alt="Boundary" src="https://github.com/user-attachments/assets/1b7c8c5b-7b8f-4adf-8795-325bd28715c6" />