I'm trying to understand the communication patterns between the different prefect server components. IIUC the UI component has to talk to the apollo graphql frontend via a publicly accessible IP. Do any of the other components need to talk to that endpoint via the public IP?

Nope. The agents do though.

Great - thanks for the info Amanda!