forked from wrenn/wrenn
The veth addressing uses 10.12.0.0/16 with 2 IPs per slot. At slot index 32768, vethOffset=65536 overflows byte arithmetic and wraps back to 10.12.0.0, causing silent IP collisions with existing sandboxes. Cap the allocator at 32767, which is the actual addressable limit.