# Can Sprites reach internal Fly services (6PN / .internal)?

**URL:** <https://community.fly.io/t/can-sprites-reach-internal-fly-services-6pn-internal/27059>\
**Category:** General\
**Tags:** sprites, login-only\
**Created:** [February 5, 2026, 4:03pm UTC](https://community.fly.io/t/can-sprites-reach-internal-fly-services-6pn-internal/27059 "2026-02-05T16:03:10Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![rdhyee](https://sea1.discourse-cdn.com/fly1/user_avatar/community.fly.io/rdhyee/32/44295_2.png) [@rdhyee](https://community.fly.io/u/rdhyee)\
**Post date:** [February 5, 2026, 4:03pm UTC](https://community.fly.io/t/can-sprites-reach-internal-fly-services-6pn-internal/27059/1 "2026-02-05T16:03:10Z")

</div>

I’m running Claude Code inside a Sprite and want to set up a secret-injecting proxy (like Fly’s Tokenizer project) so sandboxed code can make authenticated API calls without ever seeing the credentials.

The natural place to run the proxy is as a Fly Machine, but from inside a Sprite the network looks isolated:

```auto
# ip addr show (inside sprite)
inet 10.0.0.1/24 scope global spr0
inet6 fdf::1/64 scope global

# cat /etc/resolv.conf
nameserver 10.0.0.2

```

The IPv6 prefix is fdf::, not Fly’s 6PN fdaa::, and DNS doesn’t resolve .internal names.

**Core question:** Is there a supported way for Sprites to call internal Fly services (6PN / Flycast / .internal), or are Sprites intentionally isolated to \*.sprites.app + public egress only?

If Sprites can’t reach 6PN, is Sprite-to-Sprite communication via .sprites.app URLs a reasonable workaround for running a proxy?

Context: Simon Willison’s recent post about Deno Sandbox describes this “secret-injecting proxy” pattern, and he noted Fly’s Tokenizer project implements the same idea. I can share links in a follow-up if helpful.

---

<div class="post-metadata">

**Author:** ![lillian](https://sea1.discourse-cdn.com/fly1/user_avatar/community.fly.io/lillian/32/49616_2.png) [@lillian](https://community.fly.io/u/lillian)\
**Post date:** [February 5, 2026, 5:19pm UTC](https://community.fly.io/t/can-sprites-reach-internal-fly-services-6pn-internal/27059/2 "2026-02-05T17:19:41Z")

</div>



---

<div class="post-metadata">

**Author:** ![lillian](https://sea1.discourse-cdn.com/fly1/user_avatar/community.fly.io/lillian/32/49616_2.png) [@lillian](https://community.fly.io/u/lillian)\
**Post date:** [February 5, 2026, 5:20pm UTC](https://community.fly.io/t/can-sprites-reach-internal-fly-services-6pn-internal/27059/3 "2026-02-05T17:20:04Z")

</div>

hey @rdhyee your other post got caught by the spam filter, I’ve reopened that one so closing this one

---

<div class="post-metadata">

**Author:** ![rdhyee](https://sea1.discourse-cdn.com/fly1/user_avatar/community.fly.io/rdhyee/32/44295_2.png) [@rdhyee](https://community.fly.io/u/rdhyee)\
**Post date:** [February 5, 2026, 5:39pm UTC](https://community.fly.io/t/can-sprites-reach-internal-fly-services-6pn-internal/27059/4 "2026-02-05T17:39:53Z")

</div>

yeah, I saw the spam filter notice – so I reformulated the post to be sparser to appease the spam monitor!

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/fly1/original/3X/6/e/6e8955d00cb218e186ebbe3a6ab06fefdce15290.svg) [@system](https://community.fly.io/u/system)\
**Post date:** [February 12, 2026, 5:40pm UTC](https://community.fly.io/t/can-sprites-reach-internal-fly-services-6pn-internal/27059/5 "2026-02-12T17:40:11Z")

</div>

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.