Upstream Bind Settings
These settings affect how Pomerium will connect to an upstream service.
Source Address​
By default, Pomerium relies on the OS to pick an appropriate network interface for outgoing connections to an upstream service.
To override the default, you can set a specific Source Address. All connections to upstream services will be bound to this address.
How to configure​
- Core
- Enterprise
- Kubernetes
| Config file key | Environment variable | Type |
|---|---|---|
envoy_bind_config_source_address | ENVOY_BIND_CONFIG_SOURCE_ADDRESS | string |
Example​
envoy_bind_config_source_address: 10.1.2.3
Source Address is not configurable in the Enterprise Console.
Source Address is not configurable by the Pomerium Ingress Controller.
Freebind​
The Freebind option sets the IP_FREEBIND socket option on upstream connections. This option is supported only on Linux.
How to configure​
- Core
- Enterprise
- Kubernetes
| Config file keys | Environment variables | Type |
|---|---|---|
envoy_bind_config_freebind | ENVOY_BIND_CONFIG_FREEBIND | boolean |
Example​
envoy_bind_config_freebind: true
Freebind is not configurable in the Enterprise Console.
Freebind is not configurable by the Pomerium Ingress Controller.