Reverse proxying to apps in their own private networks

[Pravin1]

Hey folks., first up, I absolutely love fly.io and considering building a dev platform on fly where we provide runtime for developers (both trusted and untrusted).

The developer will get their own segmented network within the org, and inside of segmented app network there’ll be a few machines

1. Untrusted code (written by the developer) not exposed to internet.
2. Supporting functions for the untrusted code (written by us) not exposed to the internet.

I was thinking about creating a reverse proxy in the org’s default network, and have it proxy the requests to their respective segmented upstreams.

Is this possible? My reading of segmented app network documentation is that it’s not possible to reach segmented app network from other apps in the same org.

[Pravin1]

Yes, it works!

I exposed the segmented app through Flycast per

Run private applications with Flycast

Oh good question! The custom network stuff is not well documented. You can expose an app outside its custom network through Flycast. You’ll want to allocate an IPv6 on the target app, specifying the network you want it to be accessible from fly ips allocate-v6 --private --network <custom_network_name> --app <target_app> If you want it to be accessible from your org’s default network, you can just omit --network.