diff --git a/proto/agynio/api/ziti_management/v1/ziti_management.proto b/proto/agynio/api/ziti_management/v1/ziti_management.proto
index 3d968e2..56aab7c 100644
--- a/proto/agynio/api/ziti_management/v1/ziti_management.proto
+++ b/proto/agynio/api/ziti_management/v1/ziti_management.proto
@@ -75,6 +75,7 @@ enum ServiceType {
   SERVICE_TYPE_LLM_PROXY = 4;
   SERVICE_TYPE_TRACING = 5;
   SERVICE_TYPE_RUNNERS = 6;
+  SERVICE_TYPE_EGRESS_GATEWAY = 7;
   reserved 3;
   reserved "SERVICE_TYPE_RUNNER";
 }
@@ -123,6 +124,12 @@ message HostV1Config {
   string protocol = 1;
   string address = 2;
   int32 port = 3;
+  bool forward_protocol = 4;
+  bool forward_address = 5;
+  bool forward_port = 6;
+  repeated string allowed_protocols = 7;
+  repeated string allowed_addresses = 8;
+  repeated PortRange allowed_port_ranges = 9;
 }
 
 // OpenZiti intercept.v1 config — tells dialing tunnelers which address to intercept.