---
title: "Fly Answers More Questions"
description: "Fly Answers More Questions addresses three Fly usage questions: protection against malicious TCP connections that trigger runaway scaling, dedicated credentials for GitHub Actions, and selecting Dockerfiles in monorepos. For scaling abuse, Fly apps can impose per-region and global instance limits; requests beyond those limits are dropped, while networking protections are already in place. A configurable monthly maximum spend is described as in preview, and usage from an obvious DDoS or similar event may be waived. For continuous deployment, the suggested pattern is a dedicated user with a personal access token, added to a Fly organization so it can deploy to projects. For complex builds, updated flyctl adds deploy's --dockerfile option, allowing a selected Dockerfile instead of the default Dockerfile."
---

# Fly Answers More Questions

[Fly.io](https://yomu.fyi/company/fly-io) · Apr 6, 2020

**Type:** Explainer

## Summary

Fly Answers More Questions addresses three Fly usage questions: protection against malicious TCP connections that trigger runaway scaling, dedicated credentials for GitHub Actions, and selecting Dockerfiles in monorepos. For scaling abuse, Fly apps can impose per-region and global instance limits; requests beyond those limits are dropped, while networking protections are already in place. A configurable monthly maximum spend is described as in preview, and usage from an obvious DDoS or similar event may be waived. For continuous deployment, the suggested pattern is a dedicated user with a personal access token, added to a Fly organization so it can deploy to projects. For complex builds, updated flyctl adds deploy's --dockerfile option, allowing a selected Dockerfile instead of the default Dockerfile.

## Context

The questions concern limiting costs and app launches caused by malicious TCP connections, creating a dedicated deploy identity for a GitHub Actions workflow, and choosing among multiple Dockerfiles in a monorepo.

## Approach / What changed

Use per-region and global app limits, networking protections, and a planned configurable monthly spending cap; create a dedicated Fly user with a personal access token and organization membership; and use flyctl deploy's --dockerfile option to select the build file.

## Takeaways

- Fly apps support configurable per-region and global maximum instance counts; incoming requests beyond those limits are automatically dropped.
- A configurable monthly maximum spend was coming soon and in preview, while usage from an obvious DDoS or similar event could be considered for waiver.
- A dedicated deployment user can receive a personal access token, join a Fly organization, and deploy to its projects; flyctl also supports selecting a Dockerfile with --dockerfile.

**Tags:** [Docker](https://yomu.fyi/topic/docker), [Fly.io](https://yomu.fyi/topic/fly-io)

- Source: [Fly.io](https://fly.io/blog/fly-answers-more-questions)
- Source URL: https://fly.io/blog/fly-answers-more-questions
- Ingested by Yomu: 2026-09-03T01:25:01.742Z

[Read original post](https://fly.io/blog/fly-answers-more-questions)