DeepSeek Elastic Compute (DSec)
DeepSeek describes DSec as the production sandbox layer behind large-scale agent training, handling about 3 million sandboxes a day.
The paper says DSec unifies FnCall, container, microVM, and full-VM backends behind one SDK. It is built for bursty, stateful agent workloads that need isolated environments, tool use, command execution, and task-specific services. A production unit spans roughly 160 nodes, supports more than 380,000 concurrent sandboxes, and sustains over 5,000 sandbox creations per second. The system is also tied into RL training so rollout state can be preserved while idle resources are reclaimed. HN · ArXiv's note
The paper says DSec unifies FnCall, container, microVM, and full-VM backends behind one SDK. It is built for bursty, stateful agent workloads that need isolated environments, tool use, command execution, and task-specific services. A production unit spans roughly 160 nodes, supports more than 380,000 concurrent sandboxes, and sustains over 5,000 sandbox creations per second. The system is also tied into RL training so rollout state can be preserved while idle resources are reclaimed. HN · ArXiv's note
score 5