Platform.sh handles project isolation slightly differently based on which underlying architecture your project lives on.
For all projects, regardless of the underlying architecture:
The network is behind a firewall for incoming connections. Only a few ports are opened to incoming traffic by default: ports 22, 80, and 443.
Outgoing TCP traffic is not blocked, with the exception of port 25.
Both incoming and outgoing UDP traffic is blocked.
For containers to be allowed to connect to each other, the following requirements must be met:
- The containers must live in the same environment.
- You need to define an explicit relationship between the containers in your app configuration.