f the range of the possible
IPs is known, you should specify the range by CIDR blocks. If the range of the possible IPs is not known, service
entries for TCP cannot be used and
<a href=/v1.5/docs/tasks/traffic-management/egress/egress-control/#direct-access-to-external-services>the external services must be called directly</a>,
bypassing the sidecar proxies.</p><h2 id=relation-to-virtual-machines-support>Relation to virtual machines support</h2><p>Note that the scenario described in this post is different f