Add mail routes for advanced Gmail delivery

Generally, you configure Gmail messages for direct delivery. This means that all email messages for users in a domain are delivered to their Gmail inbox. You configure direct delivery when you follow the basic setup instructions for your domain.

However, you might need a more advanced delivery option—say to route mail for Microsoft® Exchange users. To do this, you first add a route for each on-premise server. You can then create routing settings that use these routes for given domains or users. These settings can be configured on a per-organization unit basis.

For mail-routing use cases, see Email routing and delivery.

Add a mail route for a domain

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in

  2. From the Admin console Home page, go to Appsand thenG Suiteand thenGmailand thenAdvanced settings.

    Tip: To see Advanced settings, scroll to the bottom of the Gmail page.

  3. Click Hosts.
  4. Click Add Route.
  5. Enter a route name. Use anything that'll help you keep track of the route.
  6. Specify any email servers for the route.

    If you select Single host, enter the route's host name or IP address. We recommend you use the host name. Also, enter the port number: 25, 587, or a number between 1024 and 65535. 
    Note: Port 465 is not allowed or supported for single host.

  7. If you select Multiple hosts, you can specify multiple primary and secondary hosts for load balancing and failover purposes. Click Add to include additional hosts, and then enter each host's host name, port number and the load percentage. The load percentage must add up to 100% in each category—primary and secondary. For example, if you have two primary hosts, enter 50 for each.

  8. Select any options you want to require.

    • Perform MX lookup on host—Deliver to MX hosts associated with the specified domain name.

    • Require TLS delivery—Encrypt messages between sending mail servers and receiving mail servers using Secure Sockets Layer/Transport Layer Security (SSL/TLS).

    • Require CA signed certificate—Require the certificate for the mail route.

  9. At the bottom, click Save.

It can take up to an hour for changes to propagate through the system. You can track changes in the Admin console audit log.

Was this helpful?
How can we improve it?