Skip to content

Recommend app-scoped static egress IPs in Static Machine IPs section #2411

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
kcmartin merged 2 commits into from
Jun 9, 2026
Merged

Recommend app-scoped static egress IPs in Static Machine IPs section #2411

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
70e632a
Recommend app-scoped static egress IPs in Static Machine IPs section
kcmartin Jun 9, 2026
bac9e0e
Fix WireGuard capitalization
kcmartin Jun 9, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 6 additions & 2 deletions machines/overview.html.markerb
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -123,10 +123,14 @@

### Static Machine IPs

Static egress IPs can be attached to a machine. These IPs survive a [machine migration](/docs/reference/machine-migration/) and are not shared between machines.
<div class="note icon">
**App-scoped static egress IPs are recommended.** The machine-scoped static egress IPs described below are a legacy feature. For most use cases, you should allocate [app-scoped static egress IPs](/docs/networking/egress-ips/#static-egress-ips-app-scoped) instead. Unlike machine-scoped IPs, app-scoped IPs can be shared between multiple machines in a region and are not deleted when machines are recreated.

Check failure on line 127 in machines/overview.html.markerb

View workflow job for this annotation

GitHub Actions / Vale linter 

[vale] reported by reviewdog 🐶
[Vale.Terms] Use 'IPs' instead of 'ips'.

Raw Output:
{"message": "[Vale.Terms] Use 'IPs' instead of 'ips'.", "location": {"path": "machines/overview.html.markerb", "range": {"start": {"line": 127, "column": 240}}}, "severity": "ERROR"}

Check failure on line 127 in machines/overview.html.markerb

View workflow job for this annotation

GitHub Actions / Vale linter 

[vale] reported by reviewdog 🐶
[Vale.Terms] Use 'IPs' instead of 'ips'.

Raw Output:
{"message": "[Vale.Terms] Use 'IPs' instead of 'ips'.", "location": {"path": "machines/overview.html.markerb", "range": {"start": {"line": 127, "column": 221}}}, "severity": "ERROR"}
</div>

A machine-scoped static egress IP is attached to a single machine and isn't shared with other machines. It survives a [machine migration](/docs/reference/machine-migration/).

Static egress IPs are useful when your machine needs to connect to a service that requires allowlisting a specific set of IPs.

Check warning on line 132 in machines/overview.html.markerb

View workflow job for this annotation

GitHub Actions / Vale linter 

[vale] reported by reviewdog 🐶
[Fly.Spelling] Is 'allowlisting' a typo?

Raw Output:
{"message": "[Fly.Spelling] Is 'allowlisting' a typo?", "location": {"path": "machines/overview.html.markerb", "range": {"start": {"line": 132, "column": 92}}}, "severity": "INFO"}
If supported, it is recommended to use [Wireguard](/docs/networking/private-networking/#private-network-vpn) to connect to external services.
If supported, it is recommended to use [WireGuard](/docs/networking/private-networking/#private-network-vpn) to connect to external services.

You can attach a static egress IP to your machine with `fly machine egress-ip allocate <machine_id>`

Expand Down
Loading