Assuming it's similar to Linode, nope, not bound. I ended up doing a very the very not-scaleable thing of dropping packets at the iptables layer from any IP that wasn't my other Linode.