Not all applications deployed on Railway need the ability to speak to the Internet as a whole. For example, I may want to deploy a private Redis or Postgres instance, or even my own application, that is purely in-cloud.

As part of securing this application, I would want the ability to block traffic to any destination other than my private network - and, potentially, even restrict communication to/from certain other services in the network.