Add AI Coding Assistant Qoder CN domains to your firewall allowlist so that Qoder CN can connect to its backend services from corporate networks.
When to configure allowlist rules
Configure these allowlist rules if your network uses firewalls, proxy servers, or other security appliances that restrict outbound HTTPS traffic. Without the correct allowlist entries, Qoder CN cannot:
Complete logon and authentication
Provide code completion and chat responses
Download offline models
Required domains
All traffic uses HTTPS on port 443.
If your firewall supports wildcard rules, allowlisting .alibabacloud.com and .alicdn.com covers the majority of required domains and simplifies ongoing maintenance. For strict environments that require explicit domain entries, use the tables below.
Logon
Add these domains to support authentication, identity verification, and static assets needed during the logon flow.
|
Domain |
Purpose |
|
|
Alibaba Cloud account service |
|
|
Logon endpoint |
|
|
Identity verification |
|
|
Account service |
|
|
Alibaba Cloud portal |
|
|
Static assets |
|
|
Static assets |
|
|
Localization resources |
|
|
Image resources |
|
|
Icon fonts |
|
|
Frontend resources |
|
|
Analytics |
|
|
Telemetry |
Code completion and chat
Add this domain to enable real-time code completion and chat features.
|
Domain |
Purpose |
|
|
Qoder CN API service for code completion and chat |
Offline model download
Add this domain only if users need to download offline models.
|
Domain |
Purpose |
|
|
Model binary downloads |
Verify connectivity
After adding the allowlist entries, run the following command from a machine on the corporate network:
curl -I https://lingma.alibabacloud.comA successful connection returns an HTTP response header such as HTTP/1.1 302 or HTTP/2 302.
If the request times out or is refused, work through the following checks:
Confirm the domain appears in the allowlist and the rule is active.
Check whether your network uses SSL inspection (for example, Zscaler or a similar proxy). SSL inspection intercepts HTTPS connections and can cause certificate errors even when the domain is allowlisted. Either exclude Qoder CN domains from inspection or import the proxy's CA certificate into the trust store.
Test from a machine outside the corporate network to isolate whether the issue is network-specific.
Review firewall and proxy logs for blocked requests to
lingma.alibabacloud.comor any other domain in the tables above.