Egress restrictions

Baseten now supports restricting a deployment’s outbound network traffic to an allow list of IP ranges and domains. Add egress_restrictions under runtime in your Truss config to lock down a sensitive model without affecting any other deployment in your organization.

runtime:
  egress_restrictions:
    ip_allow_list:
      - 203.0.113.10/32
    fqdn_allow_list:
      - "*.baseten.co"
      - huggingface.co

Contact us to enable egress restrictions for your organization. For more information, see our docs.