Codespaces blocked by firewall: suggestion for work-around #153525
Replies: 1 comment
-
💬 Your Product Feedback Has Been Submitted 🎉 Thank you for taking the time to share your insights with us! Your feedback is invaluable as we build a better GitHub experience for all our users. Here's what you can expect moving forward ⏩
Where to look to see what's shipping 👀
What you can do in the meantime 💻
As a member of the GitHub community, your participation is essential. While we can't promise that every suggestion will be implemented, we want to emphasize that your feedback is instrumental in guiding our decisions and priorities. Thank you once again for your contribution to making GitHub even better! We're grateful for your ongoing support and collaboration in shaping the future of our platform. ⭐ |
Beta Was this translation helpful? Give feedback.
-
Select Topic Area
Product Feedback
Body
I am a computer science teacher using Codespaces for my students to make assignments. My students use Codespaces from a browser, installing software locally on their devices is difficult for various reasons. I experience Codespaces being blocked by the firewall of some schools. As discussions with firewall people can be lengthy, I suggest to provide a work-around in Codespaces.
At some schools Codespaces is blocked by the firewall. It seems to be that tunnels.api.visualstudio.com is not trusted by the firewall. I've experienced this with a fortigate firewall, but it may be the same with other firewalls. Appearently the internet service provider of the school configures the firewall to block certain categories of sites. I think the blocking is based on domain name and/or certificates. My technical knowledge does not go deep enough to explain it in more detail.
I noticed that products from other vendors (like gitpod.io, codesandbox.io etc.) use the same technology (VS Code and devcontainers) but they are not blocked by the firewall. My theory is that Codespaces ended up with a less faverable qualification by firewall manufacturers because it uses a domain with the word "tunnels" in it, which may sound alarming to some secutiry people.
My suggestions is to create a second domain without the word "tunnel", for example tracks.api.visualstudio.com. The VS Code client should fall back to this domain in case there is no response on tunnels.api.visualstudio.com
Beta Was this translation helpful? Give feedback.
All reactions