{"slug": "pasta", "name": "pasta", "category": "networking", "category_name": "Networking and VPN", "description": "", "recommenders": 3, "commenters": 3, "warners": 0, "score": 2.648, "rising": -0.98, "first": "2026-03-07", "latest": "2026-06-11", "why": "add network filtering via pasta (which may be more robust than rolling your own)", "why_is_quote": true, "has_verdict": false, "sentiment": {"recommend": 3, "neutral": 0, "compare": 0, "warn": 0}, "spark": [0, 0, 0, 0, 1, 1, 0, 1, 0, 0, 0, 0], "listed": true, "loved": [], "caveat": "", "short_quote": "add network filtering via pasta (which may be more robust than rolling your own)", "kind": "", "icon": true, "domain": "passt.top", "github_repo": null, "official_url": "https://passt.top", "pricing": "", "aliases": ["pasta", "Pasta"], "verdict": null, "praise": [{"label": "", "summary": "", "quotes": [{"id": 776000352, "item_id": 48500022, "url": "https://news.ycombinator.com/item?id=48500022", "by": "webstrand", "date": "2026-06-11", "version": null, "stance": "recommend", "quote": "good experience with pasta [1] networking.", "excerpt": "If anyone's looking to sandbox network, I've had good experience with pasta [1] networking. I make a pasta+bwrap sandbox and expose only specific services via local sockets to cross the boundary. [1]: https://passt.top/passt/", "context": "", "use_case": "Sandbox network connectivity", "switched_from": "", "story": "Claude Fable is relentlessly proactive"}, {"id": 761692817, "item_id": 47605801, "url": "https://news.ycombinator.com/item?id=47605801", "by": "smallerfish", "date": "2026-04-01", "version": null, "stance": "recommend", "quote": "add network filtering via pasta (which may be more robust than rolling your own)", "excerpt": "Compare with and steal any ideas you like from mine if you like. I've got a semi-decent curl|bash pattern covered, and also add network filtering via pasta (which may be more robust than rolling your own). https://github.com/reubenfirmin/bubblewrap-tui", "context": "", "use_case": "Network filtering", "switched_from": "", "story": "Show HN: Zerobox \u2013 Sandbox any command with file and network restrictions"}, {"id": 756649600, "item_id": 47290600, "url": "https://news.ycombinator.com/item?id=47290600", "by": "mmh0000", "date": "2026-03-07", "version": null, "stance": "recommend", "quote": "switched over to Pasta[2][3] which works quite a bit differently", "excerpt": "Until recently, Podman used slirp4net[1] for its container networking. About two years ago, they switched over to Pasta[2][3] which works quite a bit differently. [1] https://github.com/rootless-containers/slirp4netns [2] https://blog.podman.io/2024/03/podman-5-0-breaking-changes-in-detail/ [3] https://passt.top/passt/about/#pasta-pack-a-subtle-tap-abstraction", "context": "", "use_case": "", "switched_from": "slirp4netns", "story": "A Decade of Docker Containers"}]}], "caveats": [], "who": [], "tags": [], "use_cases": ["sandbox network connectivity", "network filtering"], "compared": [{"slug": "bubblewrap", "name": "bubblewrap", "co": 2, "switched_from": 0, "switched_to": 0}], "makers": [], "threads": [{"url": "https://news.ycombinator.com/item?id=48498573", "title": "Claude Fable is relentlessly proactive", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=47574871", "title": "Show HN: Zerobox \u2013 Sandbox any command with file and network restrictions", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=47289311", "title": "A Decade of Docker Containers", "mentions": 1}], "sentiment_by_month": {"2025-11": {}, "2025-12": {}, "2026-01": {}, "2026-02": {}, "2026-03": {"recommend": 1}, "2026-04": {"recommend": 1}, "2026-05": {}, "2026-06": {"recommend": 1}, "2026-07": {}, "2026-08": {}, "2026-09": {}, "2026-10": {}}, "versions": [], "version_unnamed": 0, "family_ref": null, "runs_on": null, "lines": [], "quotes": [{"id": 776000352, "item_id": 48500022, "url": "https://news.ycombinator.com/item?id=48500022", "by": "webstrand", "date": "2026-06-11", "version": null, "stance": "recommend", "quote": "good experience with pasta [1] networking.", "excerpt": "If anyone's looking to sandbox network, I've had good experience with pasta [1] networking. I make a pasta+bwrap sandbox and expose only specific services via local sockets to cross the boundary. [1]: https://passt.top/passt/", "context": "", "use_case": "Sandbox network connectivity", "switched_from": "", "story": "Claude Fable is relentlessly proactive"}, {"id": 761692817, "item_id": 47605801, "url": "https://news.ycombinator.com/item?id=47605801", "by": "smallerfish", "date": "2026-04-01", "version": null, "stance": "recommend", "quote": "add network filtering via pasta (which may be more robust than rolling your own)", "excerpt": "Compare with and steal any ideas you like from mine if you like. I've got a semi-decent curl|bash pattern covered, and also add network filtering via pasta (which may be more robust than rolling your own). https://github.com/reubenfirmin/bubblewrap-tui", "context": "", "use_case": "Network filtering", "switched_from": "", "story": "Show HN: Zerobox \u2013 Sandbox any command with file and network restrictions"}, {"id": 756649600, "item_id": 47290600, "url": "https://news.ycombinator.com/item?id=47290600", "by": "mmh0000", "date": "2026-03-07", "version": null, "stance": "recommend", "quote": "switched over to Pasta[2][3] which works quite a bit differently", "excerpt": "Until recently, Podman used slirp4net[1] for its container networking. About two years ago, they switched over to Pasta[2][3] which works quite a bit differently. [1] https://github.com/rootless-containers/slirp4netns [2] https://blog.podman.io/2024/03/podman-5-0-breaking-changes-in-detail/ [3] https://passt.top/passt/about/#pasta-pack-a-subtle-tap-abstraction", "context": "", "use_case": "", "switched_from": "slirp4netns", "story": "A Decade of Docker Containers"}]}