From 6ad57bf754f67818d9554959b9bd6f7823394921 Mon Sep 17 00:00:00 2001
From: Casey Brooks <casey.brooks@agyn.io>
Date: Wed, 3 Jun 2026 17:39:33 +0000
Subject: [PATCH] feat(ziti): add egress gateway service support

---
 proto/agynio/api/ziti_management/v1/ziti_management.proto | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/proto/agynio/api/ziti_management/v1/ziti_management.proto b/proto/agynio/api/ziti_management/v1/ziti_management.proto
index 3d968e2..56aab7c 100644
--- a/proto/agynio/api/ziti_management/v1/ziti_management.proto
+++ b/proto/agynio/api/ziti_management/v1/ziti_management.proto
@@ -75,6 +75,7 @@ enum ServiceType {
   SERVICE_TYPE_LLM_PROXY = 4;
   SERVICE_TYPE_TRACING = 5;
   SERVICE_TYPE_RUNNERS = 6;
+  SERVICE_TYPE_EGRESS_GATEWAY = 7;
   reserved 3;
   reserved "SERVICE_TYPE_RUNNER";
 }
@@ -123,6 +124,12 @@ message HostV1Config {
   string protocol = 1;
   string address = 2;
   int32 port = 3;
+  bool forward_protocol = 4;
+  bool forward_address = 5;
+  bool forward_port = 6;
+  repeated string allowed_protocols = 7;
+  repeated string allowed_addresses = 8;
+  repeated PortRange allowed_port_ranges = 9;
 }
 
 // OpenZiti intercept.v1 config — tells dialing tunnelers which address to intercept.