Wildcard certificates and Certificates per Registered Domain limit

[lubien]

@hbagdi

Can I create the wildcard certificate at an organization level somehow and then create “hostnames” instead of certs at the app level?

Good call, we actually have a feature that works perfectly for what you need, it’s called Fly-Replay.

How to route certain paths to another Fly app without a reverse proxy? Meet Fly-Replay

We have an amazing feature called Fly-Replay that let anyone hosting apps on Fly teach our proxy how to reroute requests. Want to make a request go to another region? No problem. Should this request go to one specific machine? We can do that too. Should this request go to another app entirely? Eeeeasy. In this demo yall can see how to make an app rerout all requests under /blog* to another app. Don’t even open that link, here’s the entire code block for that: app.all('/blog*', function replay…

For your use-case I’d say:

• Create a router-app
• Add a wildcard certificate to router-app (ensure it has IPv4 and IPv6 so you can use certificates)
• Create the minimal possible Fly-Replay router like the one mentioned on the guide above to route foo.example.tld to foo-app.
• The “child apps” don’t need their own IP addresses anymore, feel free to remove them if you want