# Using Railway private networking

> Learn how to use Railway private networking to connect services securely and avoid egress fees, using the railway.internal URL with port and http, not https.

Author: [Flavio Copes](https://flaviocopes.com/about/) | Published: 2024-04-09 | Topics: [Docker](https://flaviocopes.com/tags/docker/), [Services](https://flaviocopes.com/tags/services/) | Canonical: https://flaviocopes.com/using-railway-private-networking/

[Railway](https://railway.app/?referralCode=kqLGRd) (mandatory referral link) has 2 different networking systems:

1. a public network
2. a private network

The public network gives you a public URL that can be referenced from anywhere.

The private network is a URL that’s private, internal to Railway.

The big benefit of the private network is that a service is inherently more secure if not accessible through the public Internet if not needed.

But on top of that, you got this huge advantage: using the private network does not have a cost, while public network incurs in egress fees ($0.10 / GB).

So by using the private network things are more secure, and cheaper to host.

For a while I had trouble using Railway’s (and Fly.io’s) private networking to connect my app with PocketBase but eventually I discovered the problem and since this might be something you can stumble upon too, let me explain.

When using the public network, you get a URL like

```bash
<custom_subdomain>.up.railway.app
```

In your app, you connect to this using

```bash
https://<the url>
```

With private networking you get a URL like this:

```bash
<custom_subdomain>.railway.internal
```

In your app, you must use the PORT as well. This is the internal port exposed by your [Docker](https://flaviocopes.com/tags/docker/) container.

In my case I used `8080`, so I had to use this URL in my app:

```bash
<custom_subdomain>.railway.internal:8080
```

Super important: use `http://` and NOT `https://` or the internal network will not work.

You typically use variable references on Railway to avoid hardcoding the variables, so you can write your variables as something like:

```bash
POCKETBASE_URL=http://${{pocketbase.RAILWAY_PRIVATE_DOMAIN}}:${{pocketbase.PORT}}
```

assuming `PORT` was defined as a PocketBase service variable on Railway.