Static Inbound & Outbound IPs for Kubernetes

Assign a permanent, verifiable IP identity to your Kubernetes pods.

Connect specific Pods or Namespaces to firewalled resources without the cost and complexity of a Cloud NAT Gateway.

Diagram showing Kubernetes connected to a shield symbol with a lock, representing secured container orchestration.

Fixed IP Identity for Allowlisting

Getting a static IP in Kubernetes usually means expensive NAT Gateways that apply to the entire cluster.

‍QuotaGuard provides a granular, static outbound IP for your individual microservices, allowing specific Pods to connect securely to restricted databases and APIs while the rest of the cluster flows normally.

Note: QuotaGuard is designed for connecting Kubernetes infrastructure to IP-restricted B2B resources like SQL databases, internal APIs, and secure gateways. This solution is not intended for web scraping consumer sites (e.g., social media or ticketing platforms) that block cloud infrastructure.

Flexible Integration Patterns

QuotaGuard fits into your K8s architecture however you prefer.

Inject configuration via ConfigMaps and Secrets, or use a sidecar pattern to tunnel traffic without modifying your application code.

Env Injection

The simplest method, just inject HTTP_PROXY variables into your Deployment YAML via K8s Secrets.

This requires zero code changes for most modern languages like Node.js, Python, and Go.

QGPass Sidecar

Run qgpass as a sidecar to tunnel traffic for legacy applications that ignore proxy settings.

This encapsulates the proxy logic alongside your application container, ensuring secure routing even for binary protocols.

Helm Friendly

Easily templatize your proxy configuration to deploy across Staging and Production namespaces.

You can manage environment-specific credentials as standard values, ensuring dev traffic never mixes with production data.

Digital shield with IP address 35.123.45.67 connected to HTTP and SOCKS5 proxies and cloud storage icons with encryption lock.

FAQs

Technical answers regarding Sidecars, Ingress/Egress, and configuring K8s Secrets for static IPs.

Is QuotaGuard a replacement for an Ingress Controller?

No.

An Ingress Controller (like Nginx or Traefik) manages internal routing of traffic entering your cluster. QuotaGuard acts as the Static IP entry point for that traffic.

For Outbound, we route your Pod traffic to the world.

For Inbound, we accept traffic from partners at a static IP and tunnel it securely to your Ingress controller or specific Service, masking your cluster's actual public IP.

Can I use this with Service Meshes like Istio or Linkerd?

Yes.

You can configure your Service Mesh's "Egress Gateway" to route external traffic through QuotaGuard.

This allows you to centralize your static IP management at the mesh level, rather than configuring individual Pods.

Does QuotaGuard support "Inbound" traffic to a private K8s cluster?

Yes.

If you have a private cluster (no public ingress) but need to receive webhooks from a bank or partner, you can use QuotaGuard as the entry point.

The partner sends data to your QG Static IP, and we tunnel that request securely to your specific Service, bypassing the need to expose your entire cluster to the public internet.

Will this work with "Serverless" Kubernetes (like AWS Fargate for EKS or GKE Autopilot)?

Yes.

Since Fargate and Autopilot abstract away the underlying nodes, you cannot assign static IPs at the infrastructure level.

QuotaGuard is the ideal solution here because it operates at the Application/Pod level, allowing you to have a static egress IP even in a fully serverless container environment.

How does this affect my Horizontal Pod Autoscaler (HPA)?

QuotaGuard is designed to scale with your HPA. As your HPA spins up new Pod replicas during a traffic spike, each new Pod simply connects to our proxy cloud.

We handle the concurrency and connection pooling, so you can scale from 10 to 1,000 Pods without hitting "IP exhaustion" limits often found with NAT Gateways.

Can I assign different Static IPs to different Namespaces?

Yes. This is a common pattern for multi-tenant clusters.

You can create separate QuotaGuard subscriptions for your staging namespace vs. your production namespace.

This ensures that testing traffic never shares the same IP reputation as your critical live traffic.

Will setting HTTP_PROXY break my internal Kubernetes service discovery?

It can if you aren't careful.

By default, setting HTTP_PROXY routes all traffic to QuotaGuard.

To prevent your Pods from trying to proxy internal traffic (like http://backend-service.default.svc), you must configure the NO_PROXY environment variable.

We recommend adding localhost,127.0.0.1,.svc,.cluster.local to your NO_PROXY list.

This ensures that internal service-to-service communication remains direct and fast, while only external traffic travels through the static IP.

Still have questions?

We don’t outsource Support to non-Engineers.

Reach out directly to the Engineers who built Shield to discuss your specific architecture, integration challenges, or compliance constraints here 👇

🚀 Ready to Get Started? Choose Your QuotaGuard Path

QuotaGuard STATIC

Why: You need a rock-solid, fixed IP for general API access, AI workflows, or standard third-party integrations.
Best For: Developers, startups, and general application connectivity.
Key Feature: SOCKS5 support for secure database access.
Sign Up for QG Static for Kubernetes

QuotaGuard SHIELD

Why: You handle HIPAA, PCI, or sensitive PII data and require End-to-End Encryption (E2EE) for full compliance.
Best For: Regulated industries, financial services, and healthcare.
Key Feature: SSL Passthrough and key isolation.
Sign Up for QG Shield for Kubernetes

Trusted by Engineering Teams Everywhere

What our customers say

Customer experiences, in their own words. Swipe or scroll to read more.

We've been using QuotaGuard Static for nearly six years to provide static IP addresses to our clients so they are able to whitelist our network traffic.

Read full testimonial

We've been using QuotaGuard Static for nearly six years to provide static IP addresses to our clients so they are able to whitelist our network traffic.

The service has been hassle free, has never "not worked" or had any downtime to my knowledge. The only time we've reached out to support was during a migration from one cloud provider to another to ensure that we wouldn't cause interruptions in the service ourselves. The service we received at that time was prompt and professional.

Zach ColonVP of Engineering at ItsaCheckmate.comSubmitted Oct 20, 2023

The app's backend runs on serverless functions, and the railway data provider I was using only accepted requests from a fixed IP address. QuotaGuard gave me exactly that, and my passengers' PNR status checks kept working.

Read full testimonial

I used QuotaGuard Static IPs for ClearBerth, my train app for Indian Railways passengers. The app's backend runs on serverless functions, and the railway data provider I was using only accepted requests from a fixed IP address. QuotaGuard gave me exactly that, and my passengers' PNR status checks kept working.

It helped me because I could keep building the app without worrying about how to get a static IP. For a solo developer that is a real relief.

The best thing about QuotaGuard is the owner himself. Michael is kind, thoughtful and genuinely warm. When I wrote to say thank you, he replied personally, said it made his Sunday morning, and offered a returning customer discount for any future project. You do not often get that from a service company. I would happily use QuotaGuard again and I recommend it to any developer who needs a static IP.

Aditya Bhattacharya, ClearBerth

Aditya BhattacharyaFounder of ClearBerth appSubmitted Oct 18, 2026

QuotaGuard provided a static IP address via a SOCKS5 proxy. Setting up the proxy and using it from my server was very straightforward.

Read full testimonial

I have a web app running in Heroku, and that server occasionally needs to FTP files from another host. That host required requests to come from a whitelisted IP address. QuotaGuard provided a static IP address via a SOCKS5 proxy. Setting up the proxy and using it from my server was very straightforward.

Stephen BeitzelCTO, Narrative TechnologiesSubmitted Mar 28, 2024

I use QuotaGuard to connect with various APIs that require IP whitelisting and run web automations that require a country-specific IP. The stability and reliability of the service have been nothing short of exceptional.

Read full testimonial

I use QuotaGuard to connect with various APIs that require IP whitelisting and run web automations that require a country-specific IP. The stability and reliability of the service have been nothing short of exceptional. It simply works as expected and whenever I’ve had any questions Michael and the team are always very quick to respond to emails. I would recommend them without a doubt.

Jose VilchesCEO at SIM StoreSubmitted Oct 29, 2023

QuotaGuard has been a reliable partner for us for many years. Their service has consistently been solid, and when we ran into a more unusual use case, their team understood the situation quickly and worked closely with us to resolve the issues.

Read full testimonial

QuotaGuard has been a reliable partner for us for many years. Their service has consistently been solid, and when we ran into a more unusual use case, their team understood the situation quickly and worked closely with us to resolve the issues. That level of responsiveness and support has made a real difference for us.

Anton Litvinenkoco-founder @ Import2Submitted Aug 11, 2026

QG helped us prove our pipeline and workflow with users and in the end, we would have stayed but we use AWS for all our production so we had to switch. Sorry to go but loved every minute of it!

Read full testimonial

QUOTAGUARD FTW! We used qg for spooling up a prototype that needed access to MongoDB through Heroku without having to use 0.0.0.0 in mdb whitelist. Big nono for privacy and security. QG helped as we were able to add it as a resource in Heroku and test our prototype. As the platform matured, more test users came on board and our bandwidth scaled to a point where we were no longer a prototype so we moved over to AWS which is where our production apps live. The team at QG is beyond awesome. I sent an email and I think within 24hrs or less we had solved the issues with Tim and Michael. The fact they didn't pester after signup was refreshing as well. They are Dev dev's who get it. QG helped us prove our pipeline and workflow with users and in the end, we would have stayed but we use AWS for all our production so we had to switch. Sorry to go but loved every minute of it!

Greg LuttonCEO Exsurgo TechnologiesSubmitted Jun 1, 2026

Even though the issue was bank related, Michael and Randall provided exceptional support and helped me troubleshoot the issue.

Read full testimonial

I've had a issue tunneling requests to my bank's VPOS through QuotaGuard.

Even though the issue was bank related, Michael and Randall provided exceptional support and helped me troubleshoot the issue.

5 stars service, highly recommended!

Ozgur S.FounderSubmitted Jul 21, 2026

The product works great - but where they really shine is the exceptional customer service.

Read full testimonial

I needed to configure a static IP address for my app running on Heroku, so I could connect to an external database in a more secure manner. A colleague recommended Quotaguard as an option.

The product works great - but where they really shine is the exceptional customer service. One of my background workers was sneakily polling, which didnt show on the logs, and the Quotaguard support team showed patience and knowledge helping me get to the root of the problem. Fantastic team.

AlexSubmitted Aug 1, 2024

QuotaGuard is an excellent company to work with, they really helped me out on my API issue. Appreciate them as a partner.

Read full testimonial

QuotaGuard is an excellent company to work with, they really helped me out on my API issue. Appreciate them as a partner.

John William MeyerCEO, Jump FinanceSubmitted Sep 30, 2026

Solid service. :) Does what's on the tin.

Read full testimonial

Solid service. :) Does what's on the tin. They know what they're doing, and I mean that in two ways: (1) their execution of their value offering is *solid*, and (2) they appear undistracted by things that *aren't* what they're doing. A "small, sharp tools", you know?

IsaacLightwardSubmitted Jan 25, 2024

Reliability Engineered for the Modern Cloud

For over a decade, QuotaGuard has provided reliable, high-performance static IP and proxy solutions for cloud environments like Heroku, Kubernetes, and AWS.

Get the fixed identity and security your application needs today.