IP ranges to use Amazon RDS.

[greg]

Hi,

Unfortunately Fly do not publish their IP ranges:

Request: Fly IP ranges

An issue we’ll run into with trying to publish IP ranges is we regularly add IPs, so even if we could provide an up-to-date page to pull them from, there would still be windows of time where the local copy your app would have would be out of sync. For a security-relevant feature, it’s probably better to keep it clear that our IP addresses are subject to change.

You are correct - they will vary per region. Which adds an extra complication.

You also can’t get a static outbound IP (e.g to use in an RDS security group) from Fly. As you’ve seen, the IP you are shown is for incoming connections. Like for a DNS A/AAAA record to point a custom domain at your app.

You have probably already seen this thread but if you scroll up and down it you may see some ideas, like:

Request: Fly IP ranges

We do have a decent example of how to connect to an RDS instance, it runs a wireguard peer + pgbouncer within a VPC: GitHub - fly-apps/rds-connector: Trivial Terraform example for a WireGuard peer to RDS The best way to do this is to create “gateways” in your Azure or AWS private networks. You make Fly wireguard peers work, or you can run something like Tailscale in your app instances and let it manage all that. As much as I hate IP allow lists, we might have what you need to use those in a fe…