Built-In Proxy Options

    Consul comes with a built-in L4 proxy for testing and development with Consul Connect service mesh.

    To get started with the built-in proxy and see a working example you can follow the Getting Started tutorial.

    Below is a complete example of all the configuration options available for the built-in proxy.

    • - The address the proxy will bind its public mTLS listener to. It defaults to the same address the agent binds to.

    • bind_port - The port the proxy will bind its public mTLS listener to. If not provided, the agent will assign a random port from its configured proxy port range specified by and sidecar_max_port.

    • - The number of milliseconds the proxy will wait for incoming mTLS connections to complete the TLS handshake. Defaults to or 10 seconds.

    All fields are optional with a sane default.

    • connect_timeout_ms - The number of milliseconds the proxy will wait to establish a TLS connection to the discovered upstream instance before giving up. Defaults to or 10 seconds.