From f946946c0b45f0b636d494a3799644888d736a89 Mon Sep 17 00:00:00 2001 From: Benjamin Muskalla Date: Tue, 30 May 2023 09:59:47 +0200 Subject: [PATCH] Document allowlist for copilot urls (#37096) Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com> Co-authored-by: Ganesh Sittampalam Co-authored-by: hubwriter --- .../troubleshooting-github-copilot/index.md | 1 + ...ng-firewall-settings-for-github-copilot.md | 39 +++++++++++++++++++ 2 files changed, 40 insertions(+) create mode 100644 content/copilot/troubleshooting-github-copilot/troubleshooting-firewall-settings-for-github-copilot.md diff --git a/content/copilot/troubleshooting-github-copilot/index.md b/content/copilot/troubleshooting-github-copilot/index.md index a3ce8dea97..8a3586a9e6 100644 --- a/content/copilot/troubleshooting-github-copilot/index.md +++ b/content/copilot/troubleshooting-github-copilot/index.md @@ -8,5 +8,6 @@ versions: children: - /troubleshooting-github-copilot-in-your-environment - /troubleshooting-certificate-errors-for-github-copilot + - /troubleshooting-firewall-settings-for-github-copilot - /troubleshooting-common-issues-with-github-copilot --- diff --git a/content/copilot/troubleshooting-github-copilot/troubleshooting-firewall-settings-for-github-copilot.md b/content/copilot/troubleshooting-github-copilot/troubleshooting-firewall-settings-for-github-copilot.md new file mode 100644 index 0000000000..817ce0b8bd --- /dev/null +++ b/content/copilot/troubleshooting-github-copilot/troubleshooting-firewall-settings-for-github-copilot.md @@ -0,0 +1,39 @@ +--- +title: Troubleshooting firewall settings for GitHub Copilot +intro: Troubleshooting help for firewall-related errors. +product: '{% data reusables.gated-features.copilot %}' +topics: + - Copilot + - Troubleshooting + - Networking +versions: + feature: copilot +shortTitle: Firewall settings +--- + +If you or your organization employs security measures like a firewall or proxy server, it may be beneficial to include certain domain URLs in an "allowlist" and open specific ports and protocols. Doing so will enhance your installation and usage of GitHub Copilot for an optimal experience. + +## URLs to add to an allowlist + +Due to GitHub Copilot's interaction with a remote machine learning model and its update checking functionality, it is recommended to include the following domain URLs in the allowlist, marking them as trusted either in the user interface or within your deployment scripts. + +| Domain and/or URL | Purpose | +| :------------------------------------- | :--------------------------------- | +| `https://github.com/login/*` | Authentication | +| `https://api.github.com/user` | User Management | +| `https://api.github.com/copilot_internal/*` | User Management | +| `https://copilot-telemetry.githubusercontent.com/telemetry` | Telemetry | +| `https://default.exp-tas.com/` | Telemetry | +| `https://copilot-proxy.githubusercontent.com/` | API service for Copilot suggestions | +| `https://origin-tracker.githubusercontent.com` | API service for Copilot suggestions | + +Additional domains and URLs may require allowlisting, depending on your organization's security policies and the editors in use. For more information about specific editors, see [Further reading](#further-reading). + +## Can the GitHub Copilot work behind a CIDR block? +No, GitHub Copilot only provides public endpoints for networking filters. + +## Further reading + +- [Network Connections in Visual Studio Code](https://code.visualstudio.com/docs/setup/network) +- [Install and use Visual Studio and Azure Services behind a firewall or proxy server](https://learn.microsoft.com/en-us/visualstudio/install/install-and-use-visual-studio-behind-a-firewall-or-proxy-server) +- [AUTOTITLE](/get-started/using-github/troubleshooting-connectivity-problems) \ No newline at end of file