I don't believe they do, they use Firecracker microVMs for isolation: https://fly.io/docs/reference/architecture/

https://fly.io/blog/ssh-and-user-mode-ip-wireguard/

We don't.