render-private-services

Create a private service by setting `type: pserv` in your Render Blueprint. Private services have no public URL or onrender.com subdomain and are reachable only at `<service-name>:<port>` by other services in the same region and workspace.

A private service binds to a port and receives traffic from other services on the private network, while a background worker receives no traffic and typically pulls work from a queue. If your process listens on a port, use a private service; if it only consumes jobs, use a worker.

Use `fromService` in the consumer's env vars with the private service name, `type: pserv`, and `property: hostport`. Render injects the internal `host:port` address, which your code prefixes with the protocol, such as `http://`.

Yes, private services support any protocol including gRPC, TCP, WebSocket, and custom binary protocols on any non-restricted port. Bind your server to 0.0.0.0 and share the hostport with consumers; no TLS is needed on the encrypted private network.

Common causes include binding to 127.0.0.1 instead of 0.0.0.0, the process not listening on any port, or the services being in different regions or workspaces. Private networking only works between services in the same region and workspace.