Scale up as you grow — whether you're running one virtual machine or ten thousand.

From GPU-powered inference and Kubernetes to managed databases and storage, get everything you need to build, scale, and deploy intelligent applications.

When deploying a “internal” service in App Platform that is intended to be internal-only, the platform automatically adds port 8080 as a public HTTP port, even though the service specification explicitly defines only internal ports.
Steps to Reproduce:
spec:
name: deploystack
region: nyc
services:
- name: db
image:
registry_type: DOCKER_HUB
registry: library
repository: mariadb
tag: "11.2"
instance_count: 1
instance_size_slug: basic-xxs
health_check:
port: 3306
internal_ports:
- 3306
Deploy the application
Check the service configuration
Expected Behavior:
The database service should only expose the specified internal port (3306)
No public HTTP ports should be added when not explicitly configured
Actual Behavior:
App Platform automatically adds port 8080 as a public HTTP port
This happens despite only specifying internal_ports in the configuration
Impact:
Unnecessarily exposes services to the public internet
Violates the principle of least privilege
Creates potential security concerns for internal-only services
Makes it impossible to properly configure internal-only services without public exposure
Additional Context: This behavior appears to be hardcoded into App Platform and cannot be disabled through the service specification, which is problematic for deploying internal-only services like databases.
dolphinnn
Vaishnavi Vundyala
016512ea60864da0867e5280f293de
Peter Monadjemi
Prince7hakur
devjk1
fc9acbfbc3124cbf8df28a1c5c5cdb
ab871885551143798f41908c709271
gouskova
Saivion Services
Marin
182d09356ab94d3893ddfaca4f0270