Network

This page covers networking details for Apply.Build apps.

Ingress

All inbound traffic goes through Apply.Build's edge network:

  • HTTPS only (HTTP is redirected to HTTPS)
  • TLS 1.2 and 1.3 supported
  • HTTP/2 enabled by default
  • WebSocket connections supported

Your app should listen on the port you configure in the app settings when deploying.

Egress

Apps can make outbound requests to the public internet. There are no restrictions on outbound connections, with the exceptions listed on the Abuse Prevention page.

IP addresses

If you need to allowlist Apply.Build's IP addresses (for example, to connect to a database with IP-based access control), contact support for the current IP ranges.

IP addresses may change over time. We recommend using hostname-based access control where possible.

Ports

PortProtocolUsage
443HTTPSAll inbound traffic
80HTTPRedirects to HTTPS

Your app receives traffic on the port you define in the app configuration. The edge network handles TLS termination and forwards plain HTTP to your app.

DNS

Each app gets a subdomain at *.apps.apply.build. Custom domains are supported via CNAME or A records. See Custom Domains for setup instructions.