# Envoy Admin Interface

These settings can be used to enable the [Envoy admin interface](https://www.envoyproxy.io/docs/envoy/latest/operations/admin#operations-admin-interface). The Envoy admin interface can be useful when debugging issues with Pomerium itself.

Access to the admin interface must be carefully controlled.

## Envoy Admin Address

**Envoy Admin Address** configures the listener address for the Envoy admin interface. If this setting is unset or empty, the Envoy admin interface will not be enabled.

### How to configure

**Core:**

| **Config file keys**  | **Environment variables** | **Type** |
| :-------------------- | :------------------------ | :------- |
| `envoy_admin_address` | `ENVOY_ADMIN_ADDRESS`     | `string` |

### Example

```yaml
envoy_admin_address: '127.0.0.1:29091'
```

**Enterprise:**

**Envoy Admin Address** is not configurable in the Enterprise Console.

**Kubernetes:**

**Envoy Admin Address** is not configurable by the Pomerium Ingress Controller.

## Envoy Admin Access Log Path

**Envoy Admin Access Log Path** enables access logging for requests to the Envoy admin interface.

### How to configure

**Core:**

| **Config file keys** | **Environment variables** | **Type** | **Default** |
| :-- | :-- | :-- | :-- |
| `envoy_admin_access_log_path` | `ENVOY_ADMIN_ACCESS_LOG_PATH` | `string` | `os.DevNull` (access logging disabled) |

### Example

```yaml
envoy_admin_access_log_path: /var/log/pomerium/envoy-admin-access.log
```

**Enterprise:**

**Envoy Admin Access Log Path** is not configurable in the Enterprise Console.

**Kubernetes:**

**Envoy Admin Access Log Path** is not configurable by the Pomerium Ingress Controller.

## Envoy Admin Profile Path

**Envoy Admin Profile Path** is the output path for CPU profiles taken via the Envoy admin interface.

### How to configure

**Core:**

| **Config file keys** | **Environment variables** | **Type** | **Default** |
| :-- | :-- | :-- | :-- |
| `envoy_admin_profile_path` | `ENVOY_ADMIN_PROFILE_PATH` | `string` | `os.DevNull` (profiling disabled) |

### Example

```yaml
envoy_admin_profile_path: /var/log/pomerium/envoy.prof
```

**Enterprise:**

**Envoy Admin Profile Path** is not configurable in the Enterprise Console.

**Kubernetes:**

**Envoy Admin Profile Path** is not configurable by the Pomerium Ingress Controller.