INSIGHTS_TERMINAL// ANZ_FIELD_NOTES

Real data engineering
from the field

Practical lessons, patterns, and trade-offs from teams building production data platforms across Australia and New Zealand.

ANZ • PRODUCTION • 2024-2026
A_018 June 2026

Static egress IPs for Postgres on Fly.io: an Envoy egress proxy

Fly Machines do not have stable outbound IPs by default — a problem when your Postgres provider (ClickHouse Cloud, PlanetScale, Neon, RDS, and others) expects a short IP allowlist. This post walks through a production pattern: a dedicated Fly app running Envoy as an L4 TCP egress proxy so every consumer exits from one or two static addresses you whitelist once, with separate paths for direct Postgres (5432) and ClickHouse managed PgBouncer (6432).

Peter Hanssens
Read_Forward →

Stay Updated

Get practical field notes and production patterns from data teams across Australia and New Zealand.

Also follow Events feedfor workshops & webinars.