Outbound UDP to any port
Paid sandboxes send UDP to any public address and port: HTTP/3 and QUIC, DNS to a resolver you choose, time sync, game and media servers, WireGuard and other VPN clients. Private addresses are refused, a sandbox sends at most 50,000 datagrams a second, and a flow that gets no answer after 256 datagrams is closed. Trial sandboxes send TCP only. See networking.