diff --git a/default.env b/default.env
index d3b590c4eb..32ee2772ca 100644
--- a/default.env
+++ b/default.env
@@ -374,6 +374,9 @@ INFINITO_SWARM_TEST_LABEL=infinito.swarm-test
 # 'true' deploys the WireGuard mesh with the swarm cluster; the CI vpn axis sets it per row, anything else leaves the mesh out.
 INFINITO_SWARM_VPN=
 
+# 'true' moves a meshed deploy to SSH but leaves it on the underlay addresses, so a sweep can measure the transport apart from the tunnel; anything else keeps the mesh addresses.
+INFINITO_SWARM_SSH_UNDERLAY=
+
 # Fixed lab IP of worker node 1.
 INFINITO_SWARM_WRK1_IP=192.168.244.11