# Design an Enterprise Remote Browser Isolation System Design a system that runs browsing sessions on isolated virtual nodes and streams the result to enterprise clients. Include authentication, authorization, gateways, rate limiting, edge delivery, and bidirectional user input. ### Constraints & Assumptions - Untrusted web content never executes on the client device. - Tenant data and sessions must be isolated. ### Clarifying Questions to Ask - Is rendering pixel-streamed or DOM-transformed? - Which downloads, clipboard actions, and uploads are allowed? ### What a Strong Answer Covers - Session admission, sandboxing, routing, streaming, policy, lifecycle, and regional resilience. - Abuse controls, auditability, capacity, and cleanup. ### Follow-up Questions - How would zero-day containment work? - How would latency be reduced globally?