Secure .internal private networking endpoints

[ignoramous]

I’m not exactly sure what you’re trying to do, but…

@matty-f

My second thought was to check the incoming TLS servername, but then I realized my app runs behind the fly-owned SSL termination point, and only receives plaintext http

Use ProxyProto V2 to have SNIs sent to your application by fly-proxy.

tls + proxy_protocol How to set HTTP/2 ALPN?

Update: This is now available. If you use something like this for your port handler, it should work: [[services.ports]] handlers = ["proxy_proto"] port = "5000" proxy_proto_options = { version = "v2" }