Configuring TCP Routing in PAS

Page last updated:

Warning: Pivotal Cloud Foundry (PCF) v2.4 is no longer supported because it has reached the End of General Support (EOGS) phase as defined by the Support Lifecycle Policy. To stay up to date with the latest software and security updates, upgrade to a supported version.

This topic describes how to enable the TCP routing feature in a Pivotal Application Service (PAS) deployment.

Breaking Change: If you have mutual TLS app identity verification enabled, Envoy only recognizes communications from the Gorouter. Therefore, TCP no longer works.

Enable TCP Routing

TCP Routing enables applications to be run on PCF that require inbound requests on non-HTTP protocols. Before enabling TCP Routing, review the Pre-Deployment Steps that describe required networking infrastructure changes.

  1. TCP Routing is disabled by default. To enable this feature, select the Enable TCP Routing radio button.

  2. In TCP Router IPs, enter the IP address(es) you would like assigned to the TCP Routers. The addresses must be within your subnet CIDR block. These will be the same IP addresses you configured your load balancer with in Pre-Deployment Steps, unless you configured DNS to resolve the TCP domain name directly to an IP you’ve chosen for the TCP router. You can enter multiple values as a comma-delimited list or as a range. For example,, or

  3. For TCP Routing Ports, enter a single port or a range of ports for the load balancer to forward to. This field does not accept a comma-delimited list. If you configured AWS for PCF manually, enter 1024-1123 which corresponds to the rules you created for pcf-tcp-elb.

    • To support multiple TCP routes, Pivotal recommends allocating multiple ports.
    • To allocate a list of ports rather than a range:
  4. If you are deploying PCF to AWS, Azure or GCP, add the name of your load balancer to TCP Router job of the Resource Config page of the PAS tile. For mor information, see the PCF installation documentation for you IaaS.

Disable TCP Routing

  1. If you want to disable TCP routing after enabling it, click Select this option if you prefer to enable TCP Routing at a later time.

  2. Manually remove the TCP routing domain.