# landjail Jail Type

> [!NOTE]
> Agent Firewall is part of [AI Governance](https://coder.com/docs/ai-coder/ai-governance.md), which is
> included with a Premium license.

landjail is Agent Firewall's alternative jail type that uses Landlock V4 for
network isolation.

## Overview

Agent Firewall uses Landlock V4 to enforce network restrictions:

- All `bind` syscalls are forbidden
- All `connect` syscalls are forbidden except to the port that is used by http
  proxy

This provides network isolation without requiring network namespace capabilities
or special Docker permissions.