Overview
Use this guide to turn on the Claude Code Model Router so that Claude Code traffic routes to private models connected to your F5 Workforce AI Security tenant. The router redirects each Claude model family to a private model of your choice. The four families are Haiku, Sonnet, Opus, and Fable. That private model can be hosted on AWS Bedrock, Google Vertex AI, or Azure AI Foundry.
After you complete this guide, the router is on and every route is mapped. Claude Code traffic doesn't start flowing through it until developers also install the Claude Code Helper.
Some organizations turn on this router because they already run Claude models through a cloud provider. They want development teams to keep using Claude Code while inference traffic stays inside that private deployment. Other organizations turn it on to meet data residency requirements, or to keep code and prompts off the public Anthropic API. Some route traffic through a committed-use agreement they negotiated with a cloud provider.
Before you begin
Before you begin, make sure you have:
A private model for each family you want to route: a Haiku, Sonnet, Opus, or Fable-compatible model, already added to your Workforce AI Security tenant. See Adding Private Model Connectors.
Access to Default Policy or Group Policy configuration: in GOVERN, you need access to either Default Policy or Group Policies.
Turn on the Claude Code Model Router
In GOVERN, go to Default Policy or Group Policies, and select the policy to configure.
You can turn on the router on the Default Policy, on any Group Policy, or on both.
Go to the Claude Code Model Router section, and turn on the toggle.
You must configure all four model routes before the router can work correctly.
For each of the four Claude model families, select a private model to route to:
Claude Haiku: routes to a private model from the Haiku, Sonnet, or Opus family.
Claude Sonnet: routes to a private model from the Sonnet or Opus family.
Claude Opus: routes to a private model from the Sonnet, Opus, or Fable family.
Claude Fable: routes to a private model from the Opus or Sonnet family.
The list for each route shows only private models from a compatible family. A Recommended label appears next to a selection when the private model matches the same family as the Claude model being routed.
Select the latest available version of the private model. An older model version can cause failed requests or degraded output quality.
Verify the configuration
Confirm that all four routes show a selected private model and that the router toggle is on. A route left unconfigured stops the router from working for any model family, not only the one that's missing.
To confirm traffic routes correctly, install the Claude Code Helper on a developer machine and start a Claude Code session. See Deploy the Claude Code Helper.
References
For more information, see:
Deploy the Claude Code Helper
Agentic development and agentic harnesses