render-networking

Configures private networking, internal DNS, and service discovery between Render services.

Updated Jul 15, 2026
One-click install
npx skills add https://github.com/greenmartialarts/EventCore --skill render-networking-greenmartialarts
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: render-networking
Source: https://github.com/greenmartialarts/EventCore/tree/main/.junie/skills/render-networking
Command: npx skills add https://github.com/greenmartialarts/EventCore --skill render-networking-greenmartialarts

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Connecting services on Render without exposing traffic to the public internet requires understanding internal hostnames, port rules, region and workspace constraints, and service-type limitations, which are easy to misconfigure and hard to debug. ## Core Features & Use Cases - Private Network Configuration: Explains which Render resource types (Web Services, Private Services, Workers, Cron Jobs, datastores) can send or receive private traffic, including free-tier inbound restrictions. - Service Discovery & Ports: Covers the [hostname]-discovery DNS pattern for multi-instance services, the 75-port limit, reserved ports (10000, 18012, 18013, 19099), and multi-port Web Service behavior. - Troubleshooting Guidance: Diagnoses DNS failures, cross-region and cross-workspace limits, protocol mismatches, and environment isolation issues via references/troubleshooting.md. - Use Case: When a Fastify API on Render cannot reach a background worker or Postgres over the private network, use this Skill to identify that workers have no internal hostname and that datastores must be reached via their internal URL. ## Quick Start Ask how to connect two Render services privately, for example: how do I let my web service call my private backend on Render without exposing it publicly?

Frequently Asked Questions about render-networking

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I connect two Render services over the private network?

Render services connect privately using the internal hostname and port shown in the Dashboard under Connect > Internal, formatted as http://[internal-hostname]:[port]. Both services must be in the same region and same workspace for private DNS to resolve.

How does service discovery work for scaled Render services?

Render exposes a [hostname]-discovery DNS name that resolves to all instance IPs of a multi-instance service. The RENDER_DISCOVERY_SERVICE environment variable supports scripts and app code that implement custom load balancing or per-instance health checks.

Can a Render background worker receive private network traffic?

No, Background Workers, Cron Jobs, and Workflow Runs have no internal hostname and cannot accept inbound private connections. They can only initiate outbound calls, such as connecting to a Postgres or Key Value internal URL.

Why does private networking fail between my Render services?

Common causes include services in different regions or workspaces, protocol mismatches from missing http:// or https:// prefixes, reserved port conflicts, or environment isolation settings on Professional workspaces. Free-tier Web Services also cannot receive inbound private traffic.

What ports are reserved on Render services?

Render reserves ports 10000, 18012, 18013, and 19099, which applications must not bind to. Each service supports a maximum of 75 open ports, and on multi-port Web Services only the PORT environment variable port receives public HTTP traffic.

Can Render static sites use the private network?

No, Static Sites are not on the Render private network and cannot call or be called via internal hostnames. Use a Web Service or a public API endpoint for integrations involving static frontends.