Runtime Flags
| Runtime Flag | Description | Type | Default |
|---|---|---|---|
| Match Any Incoming Port | Matches incoming HTTP requests on any port for a From URL that does not specify a port. | Boolean | true |
Match Any Incoming Port
The Match Any Incoming Port runtime flag instructs Pomerium to match requests on any port for From URLs that do not specify a port in the URL. If the port is specified in the From URL, Pomerium will only match requests on that exact port. This is the default route matching behavior.
If you disable this runtime flag, Pomerium will match incoming requests on port 443 by default unless you specify a port in the From URL.
See the From URL reference page for more information about how to configure From URLs.
How to Configure
- Core
- Enterprise
- Kubernetes
| Config file keys | Environment variables | Type | Default |
|---|---|---|---|
match_any_incoming_port | MATCH_ANY_INCOMING_PORT | string | true |
This is a bootstrap setting. It is not configurable in the Enterprise Console.
This runtime flag is currently not configurable in the Pomerium Ingress Controller.
Examples
With a From URL that does not specify an explicit port:
from: https://example.com
Pomerium will match the From URL with incoming requests on any port:
https://www.example.com
https://www.example.com:443
https://www.example.com:8443
https://www.example.com:18443
If you disable this runtime flag and do not specify a port in the From URL, Pomerium will match the incoming request on port :443, the default listening port.
https://www.example.com:443