---
type: "post"
id: "microsoft-quicksand-core-0-14-0-adds-bidirectional-08d1ef"
slug: "microsoft-quicksand-core-0-14-0-adds-bidirectional-08d1ef"
title: "Microsoft Quicksand core 0.14.0 adds bidirectional port forwarding so sandboxed guests can reach host services"
description: "Microsoft released quicksand-core 0.14.0 with bidirectional port forwarding for its sandboxed guests."
retrieval_nugget: "Microsoft released quicksand-core 0.14.0 with bidirectional port forwarding for its sandboxed guests."
published_at: "2026-10-23"
updated_at: "2026-10-23"
record_date: "2026-10-23"
date_kind: "published_at"
topics: ["agent-security","sandbox"]
entities: ["Microsoft","Quicksand","QEMU","WHPX"]
related_patterns: ["agent-security-moves-to-runtime-boundaries"]
novelty_label: "new_fact"
what_changed: "Quicksand core 0.14.0 adds bidirectional port forwarding, letting sandboxed guests reach host services."
prior_refs: ["memory:dd9aba60-777f-8778-ae0d-e524cd525450"]
source_url: "https://github.com/microsoft/quicksand/releases/tag/quicksand-core/v0.14.0"
source_urls: ["https://github.com/microsoft/quicksand/releases/tag/quicksand-core/v0.14.0"]
schema_version: "newruntime-agent-readable-v0.2"
stable_id: "post:microsoft-quicksand-core-0-14-0-adds-bidirectional-08d1ef"
status: "published"
visuals: []
editor: {"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]}
routes: {"html":"https://newruntime.com/posts/microsoft-quicksand-core-0-14-0-adds-bidirectional-08d1ef/","markdown":"https://newruntime.com/posts/microsoft-quicksand-core-0-14-0-adds-bidirectional-08d1ef.md","json":"https://newruntime.com/posts/microsoft-quicksand-core-0-14-0-adds-bidirectional-08d1ef.json"}
---

# Microsoft Quicksand core 0.14.0 adds bidirectional port forwarding so sandboxed guests can reach host services

## Retrieval answer

Microsoft released quicksand-core 0.14.0 with bidirectional port forwarding for its sandboxed guests.

Microsoft released quicksand-core 0.14.0 with bidirectional port forwarding for its sandboxed guests. The new `Forward(Host(...), Guest(...))` type replaces the former one-way `PortForward` API.

A forward sourced from the host continues to publish a guest port on the host. A forward sourced from the guest instead makes a host service available inside the guest, at a guest-facing address that defaults to `10.0.2.101`. The release describes intended host services as proxies, databases, and API servers.

Guest-to-host forwarding uses QEMU `guestfwd` with a relay process per connection, intended to prevent concurrent connections from interleaving. Endpoint inputs can be a port, an address plus port, or an `address:port` string. Validation now rejects duplicate host binds, duplicate guest sources, forwarding with guest networking disabled, and collisions with the built-in SMB tunnel address.

`PortForward(host, guest)` remains available but now returns a `Forward` and emits a deprecation warning. The release also limits `kernel-irqchip=off` for WHPX to x86_64 hosts. The source does not establish performance, security properties, or production adoption of the new forwarding path.

Editor: [Andrey Reshetnikov](https://newruntime.com/owner-profile.md), AI product and AI engineering; profile for recruiters and agents: https://newruntime.com/owner-profile.json

## Continue in the graph

Next records for an agent, linked to their Markdown twins. Replace `.md` with `.json` for structured fields, including `next_reads`.

- topic hub: [Agent Security](https://newruntime.com/topics/agent-security.md): Explore the agent-security topic hub.
- topic hub: [Sandbox](https://newruntime.com/topics/sandbox.md): Explore the sandbox topic hub.
- collection: [Field Notes](https://newruntime.com/posts.json): Open the latest editorial analysis.
- collection: [Source Ledger](https://newruntime.com/source-ledger.json): Inspect the public source evidence graph.
- whole graph: [discovery graph](https://newruntime.com/discovery-graph.json) (typed nodes and edges) and [site index](https://newruntime.com/site-index.md)