If you have set up a firewall or are using a third-party firewall or proxy, specific ports may be blocked, preventing end users from accessing cloud computers from Alibaba Cloud Workspace terminals. Therefore, you must enable the reserved ports described in this topic after you set up the firewall or proxy to ensure proper cloud computer access for end users. Data transmitted over the ports described in this topic is encrypted by using Secure Socket Layer (SSL).
Ports for private network connections
Ports at the control layer
Domain name/Service | Port | Description | IP address |
Alibaba Cloud DNS (DNS) | TCP/UDP: 53 | The DNS service in Alibaba Cloud. For more information, see Public Authoritative DNS Resolution. | |
| TCP/UDP: 123 | The clock source of the Network Time Protocol (NTP) server. For more information, see Clock synchronization. | |
ecd-vpc. | TCP: 443 | The cloud management link. | For more information, see the Mappings between regions and domain names in the cloud management link for private network connections table in this topic. |
wyota.vpc-proxy.aliyuncs.com | TCP: 443 | The private domain name of the over-the-air (OTA) service, which is used when end users log on to Alibaba Cloud Workspace terminals by using organization IDs. Note For more information about the Object Storage Service (OSS) private domain names of the OTA update packages for Alibaba Cloud Workspace terminals in each region, see the OSS private domain names section in this topic. | |
wyota-vpc. | TCP: 443 | The private domain name of the OTA service, which is used when end users log on to Alibaba Cloud Workspace terminals by using office network IDs. Note For more information about the Object Storage Service (OSS) private domain names of the OTA update packages for Alibaba Cloud Workspace terminals in each region, see the OSS private domain names section in this topic. | |
appstream-center-vpc. | TCP: 443 | The domain name that is used to access services and cloud applications when end users log on to Alibaba Cloud Workspace terminals by using office network IDs. Note Only Alibaba Cloud Workspace terminals V5.0.1 or later are supported. | |
appstream-center.vpc-proxy.aliyuncs.com | TCP: 443 | The private domain name that is used to access services and cloud applications when end users log on to Alibaba Cloud Workspace terminals by using organization IDs. | |
ecd.vpc-proxy.aliyuncs.com | TCP: 443 | The private domain name that is used to query authorized cloud resources when end users log on to Alibaba Cloud Workspace terminals by using organization IDs. The cloud resources include cloud computers, cloud applications, enterprise drives, and cloud-based browsers. | |
metaspace.vpc-proxy.aliyuncs.com | TCP: 443 | The private domain name of the Alibaba Cloud Workspace collaboration service when you use the stream collaboration feature. |
Mappings between regions and domain names in the cloud management link for private network connections
The IP addresses provided in the following table are generally fixed. The IP addresses used in your specific environment may vary.
Region | Domain name for managing cloud computers | Domain name for the OTA service | Domain name for accessing services and cloud applications | IP address |
China (Hangzhou) | ecd-vpc.cn-hangzhou.aliyuncs.com | wyota-vpc.cn-hangzhou.aliyuncs.com | appstream-center-vpc.cn-hangzhou.aliyuncs.com | |
China (Shanghai) | ecd-vpc.cn-shanghai.aliyuncs.com | wyota-vpc.cn-shanghai.aliyuncs.com | appstream-center-vpc.cn-shanghai.aliyuncs.com | |
China (Nanjing - Local Region) | ecd-vpc.cn-nanjing.aliyuncs.com | wyota-vpc.cn-nanjing.aliyuncs.com | appstream-center-vpc.cn-nanjing.aliyuncs.com | |
China (Shenzhen) | ecd-vpc.cn-shenzhen.aliyuncs.com | wyota-vpc.cn-shenzhen.aliyuncs.com | appstream-center-vpc.cn-shenzhen.aliyuncs.com | |
China (Beijing) | ecd-vpc.cn-beijing.aliyuncs.com | wyota-vpc.cn-beijing.aliyuncs.com | appstream-center-vpc.cn-beijing.aliyuncs.com | |
China East 1 Finance | ecd-vpc.cn-hangzhou-finance.aliyuncs.com | wyota-vpc.cn-hangzhou-finance.aliyuncs.com | appstream-center-vpc.cn-hangzhou-finance.aliyuncs.com | |
China North 2 Ali Gov | ecd-vpc.cn-north-2-gov-1.aliyuncs.com | wyota-vpc.cn-north-2-gov-1.aliyuncs.com | appstream-center-vpc.cn-north-2-gov-1.aliyuncs.com | |
China (Hong Kong) | ecd-vpc.cn-hongkong.aliyuncs.com | wyota-vpc.cn-hongkong.aliyuncs.com | appstream-center-vpc.cn-hongkong.aliyuncs.com | |
Singapore | ecd-vpc.ap-southeast-1.aliyuncs.com | wyota-vpc.ap-southeast-1.aliyuncs.com | appstream-center-vpc.ap-southeast-1.aliyuncs.com | |
Philippines (Manila) | ecd-vpc.ap-southeast-6.aliyuncs.com | wyota-vpc.ap-southeast-6.aliyuncs.com | appstream-center-vpc.ap-southeast-6.aliyuncs.com | |
Thailand (Bangkok) | ecd-vpc.ap-southeast-7.aliyuncs.com | wyota-vpc.ap-southeast-7.aliyuncs.com | appstream-center-vpc.ap-southeast-7.aliyuncs.com | |
Japan (Tokyo) | ecd-vpc.ap-northeast-1.aliyuncs.com | wyota-vpc.ap-northeast-1.aliyuncs.com | appstream-center-vpc.ap-northeast-1.aliyuncs.com | |
UK (London) | ecd-vpc.eu-west-1.aliyuncs .com | wyota-vpc.eu-west-1.aliyuncs.com | appstream-center-vpc.eu-west-1.aliyuncs.com | |
US (Silicon Valley) | ecd-vpc.us-west-1.aliyuncs.com | wyota-vpc.us-west-1.aliyuncs.com | appstream-center-vpc.us-west-1.aliyuncs.com | |
Germany (Frankfurt) | ecd-vpc.eu-central-1.aliyuncs.com | wyota-vpc.eu-central-1.aliyuncs.com | appstream-central-vpc.eu-central-1.aliyuncs.com | |
SAU (Riyadh - Partner Region) | ecd-vpc.me-central-1.aliyuncs.com | wyota-vpc.me-central-1.aliyuncs.com | appstream-central-vpc.me-central-1.aliyuncs.com | |
OSS private domain names
The following table describes the OSS private domain names of the OTA update packages for Alibaba Cloud Workspace terminals in each region. For more information about the virtual IP address (VIP) ranges in each region, see Access OSS using bucket domain names.
Region | Domain name |
China (Hangzhou) | |
China (Shanghai) | |
China (Nanjing - Local Region) | |
China (Shenzhen) | |
China (Beijing) | |
China (Hong Kong) | |
Singapore | |
Philippines (Manila) | |
Thailand (Bangkok) | |
Japan (Tokyo) | |
UK (London) | |
US (Silicon Valley) | |
Germany (Frankfurt) | |
SAU (Riyadh - Partner Region) | |
Ports at the data layer
At the data layer, 30 ports are reserved. To ensure the system does not block connections after you scale out cloud computers, open all the 30 reserved ports at the data layer.
Port/IP address | Description |
TCP/UDP: 5912–5941 | The ports that are used to connect to cloud computers. |
TCP: 3128 | The port over which access from clients over private networks is supported. In private network access mode, activation of VIP addresses within the 100 block is not required. Control layer access is facilitated by using private network gateways. |
IP address | The domain name of a private gateway. You can perform the following operations to query the domain name: Log on to the EDS Enterprise console, go to the Office Networks page, find the office network that you want to manage, click the office network ID, and then find the CIDR Block field in the Network Information section to query the domain name of a private gateway. |
Ports for Internet connections
Ports at the control layer
Domain name | Port | Description |
wuying.aliyun.com | TCP: 443 | The address of the Alibaba Cloud Workspace web client. |
ecd. | TCP: 443 | The domain name of the cloud management link in a region. For more information, see the Mappings between regions and domain names in the cloud management link for Internet connections table in this topic. |
appstream-center.cn-shanghai.aliyuncs.com | TCP: 443 | The domain name that is used to access services and cloud applications from Alibaba Cloud Workspace terminals (V5.0.1 or later). |
wyota.cn-hangzhou.aliyuncs.com | TCP: 443 | The domain name that is used for the OTA service. |
post-cn-7mz2njrln01.mqtt.aliyuncs.com |
| The domain name that is used for long connections and the message center. |
ecd.cn-shanghai.aliyuncs.com | TCP: 443 | The domain name that is used to log on to Alibaba Cloud Workspace terminals by using organization IDs. |
metaspace.aliyuncs.com | TCP: 443 | The public domain name of the Alibaba Cloud Workspace collaboration service when you use the stream collaboration feature. |
Mappings between regions and domain names in the cloud management link for Internet connections
Region | Domain name |
China (Hangzhou) | |
China (Shanghai) | |
China (Nanjing - Local Region) | |
China (Fuzhou - Local Region) | |
China (Shenzhen) | |
China (Beijing) | |
China (Hong Kong) | |
Singapore | |
Philippines (Manila) | |
Thailand (Bangkok) | |
Japan (Tokyo) | |
UK (London) | |
US (Silicon Valley) | |
Germany (Frankfurt) | |
SAU (Riyadh - Partner Region) | |
Ports at the data layer
Port | Description |
TCP/UDP: 5912–5941 | The port that is used when end users connect to cloud computers from Alibaba Cloud Workspace clients. |
TCP: 8008 to 8037 | The port that is used when end users connect to cloud computers from the Alibaba Cloud Workspace web client. |
Gateway domain name | For more information about gateway domain names in each region, see the Regions and gateway domain names section in this topic. |
Regions and gateway domain names
Region | Gateway domain name | Gateway public IP address |
China (Hangzhou) | gw-cn-hangzhou.wuying.aliyuncs.com | 47.97.74.87 |
gw-cn-hangzhou-asp-198-10-1.wuying.aliyuncs.com | 47.99.37.94 | |
gw-cn-hangzhou-asp-198-1-1.wuying.aliyuncs.com | 120.26.141.139 | |
gw-cn-hangzhou-asp-198-11-1.wuying.aliyuncs.com | 120.55.60.130 | |
gw-cn-hangzhou-asp-198-12-1.wuying.aliyuncs.com | 116.62.234.4 | |
gw-cn-hangzhou-asp-198-13-1.wuying.aliyuncs.com | 47.98.131.53 | |
gw-cn-hangzhou-asp-198-14-1.wuying.aliyuncs.com | 118.31.172.147 | |
gw-cn-hangzhou-asp-198-15-1.wuying.aliyuncs.com | 114.55.218.191 | |
gw-cn-hangzhou-asp-198-16-1.wuying.aliyuncs.com | 114.55.142.159 | |
gw-cn-hangzhou-asp-198-2-1.wuying.aliyuncs.com | 47.97.41.234 | |
gw-cn-hangzhou-asp-198-3-1.wuying.aliyuncs.com | 47.114.112.204 | |
gw-cn-hangzhou-asp-198-6-1.wuying.aliyuncs.com | 121.41.79.158 | |
gw-cn-hangzhou-asp-198-7-1.wuying.aliyuncs.com | 47.99.100.44 | |
gw-cn-hangzhou-asp-198-8-1.wuying.aliyuncs.com | 223.4.28.103 | |
gw-cn-hangzhou-asp-198-9-1.wuying.aliyuncs.com | 47.98.224.184 | |
gw-cn-hangzhou-asp-198-17-1.wuying.aliyuncs.com | 47.99.70.244 | |
gw-cn-hangzhou-citrix-198-4-1.wuying.aliyuncs.com | 121.41.102.199 | |
gw-cn-hangzhou-citrix-198-5-1.wuying.aliyuncs.com | 47.110.89.162 | |
gw-cn-hangzhou-citrix-198-5-1.wuying.aliyuncs.com | 47.110.89.162 | |
gw-cn-hangzhou-cluster-198-2-1.wuying.aliyuncs.com | 121.41.116.41 | |
gw-cn-hangzhou-cluster-198-3-1.wuying.aliyuncs.com | 114.55.254.239 | |
gw-cn-hangzhou-h-10.wuying.aliyuncs.com | 116.62.40.158 | |
gw-cn-hangzhou-h-172.wuying.aliyuncs.com | 118.178.194.34 | |
gw-cn-hangzhou-i-172.wuying.aliyuncs.com | 116.62.166.147 | |
China (Shanghai) | gw-cn-shanghai.wuying.aliyuncs.com | 47.100.45.151 |
gw-cn-shanghai-asp-198-1-1.wuying.aliyuncs.com | 106.15.39.122 | |
gw-cn-shanghai-asp-198-2-1.wuying.aliyuncs.com | 106.14.163.99 | |
gw-cn-shanghai-asp-198-3-1.wuying.aliyuncs.com | 106.15.51.30 | |
gw-cn-shanghai-asp-198-4-1.wuying.aliyuncs.com | 101.132.242.26 | |
gw-cn-shanghai-asp-198-5-1.wuying.aliyuncs.com | 139.196.47.168 | |
gw-cn-shanghai-asp-198-6-1.wuying.aliyuncs.com | 139.196.207.183 | |
gw-cn-shanghai-asp-198-7-1.wuying.aliyuncs.com | 139.196.79.151 | |
gw-cn-shanghai-asp-198-8-1.wuying.aliyuncs.com | 139.196.79.114 | |
gw-cn-shanghai-asp-198-9-1.wuying.aliyuncs.com | 101.133.236.61 | |
gw-cn-shanghai-asp-198-10-1.wuying.aliyuncs.com | 47.103.157.222 | |
gw-cn-shanghai-asp-198-11-1.wuying.aliyuncs.com | 47.116.53.64 | |
gw-cn-shanghai-asp-198-12-1.wuying.aliyuncs.com | 101.132.118.143 | |
gw-cn-shanghai-citrix-198-1-1.wuying.aliyuncs.com | 106.15.39.178 | |
gw-cn-shanghai-g-10.wuying.aliyuncs.com | 139.224.81.68 | |
gw-cn-shanghai-g-172.wuying.aliyuncs.com | 139.196.45.81 | |
gw-pu-cn-shanghai-g-cluster-198-2-1.wuying.aliyuncs.com | 47.102.147.195 | |
China (Nanjing - Local Region) (Closing Down) | gw-cn-nanjing.wuying.aliyuncs.com | 47.122.78.176 |
gw-cn-nanjing-a-cluster-198-1-1.wuying.aliyuncs.com | 47.122.1.255 | |
gw-cn-nanjing-a-cluster-198-2-1.wuying.aliyuncs.com | 47.122.0.217 | |
China (Fuzhou - Local Region) (Closing Down) | gw-cn-fuzhou.wuying.aliyuncs.com | 47.122.40.132 |
China (Shenzhen) | gw-cn-shenzhen.wuying.aliyuncs.com | 120.24.76.51 |
gw-cn-shenzhen-citrix-198-2-1.wuying.aliyuncs.com | 47.107.245.75 | |
gw-cn-shenzhen-d-10.wuying.aliyuncs.com | 8.129.19.124 | |
gw-cn-shenzhen-d-172.wuying.aliyuncs.com | 8.129.6.242 | |
gw-cn-shenzhen-e-198-1-1.wuying.aliyuncs.com | 47.107.84.196 | |
gw-cn-shenzhen-e-198-1-2.wuying.aliyuncs.com | 120.79.5.200 | |
gw-cn-shenzhen-e-198-3-1.wuying.aliyuncs.com | 39.108.228.191 | |
gw-cn-shenzhen-e-asp-198-4-1.wuying.aliyuncs.com | 120.78.78.123 | |
gw-cn-shenzhen-asp-198-5-1.wuying.aliyuncs.com | 120.77.179.236 | |
gw-cn-chengdu.wuying.aliyuncs.com | 47.108.249.216 | |
gw-cn-qingdao.wuying.aliyuncs.com | 47.104.217.25 | |
China (Beijing) | gw-cn-beijing.wuying.aliyuncs.com | 59.110.234.227 |
gw-cn-beijing-asp-198-1-1.wuying.aliyuncs.com | 39.105.111.115 | |
gw-cn-beijing-asp-198-2-1.wuying.aliyuncs.com | 101.201.142.67 | |
gw-cn-beijing-asp-198-5-1.wuying.aliyuncs.com | 101.201.64.154 | |
gw-cn-beijing-asp-198-6-1.wuying.aliyuncs.com | 123.56.87.238 | |
gw-cn-beijing-asp-198-7-1.wuying.aliyuncs.com | 182.92.233.120 | |
gw-cn-beijing-asp-198-8-1.wuying.aliyuncs.com | 123.56.217.151 | |
gw-cn-beijing-asp-198-9-1.wuying.aliyuncs.com | 123.56.78.161 | |
gw-cn-beijing-asp-198-10-1.wuying.aliyuncs.com | 39.106.44.59 | |
gw-cn-beijing-citrix-198-4-1.wuying.aliyuncs.com | 101.201.152.1 | |
gw-cn-beijing-h-10.wuying.aliyuncs.com | 123.56.55.48 | |
gw-cn-beijing-h-172.wuying.aliyuncs.com | 123.56.55.12 | |
gw-cn-beijing-h-198-1-1.wuying.aliyuncs.com | 39.106.230.144 | |
gw-cn-beijing-h-198-2-1.wuying.aliyuncs.com | 123.56.165.121 | |
China (Zhangjiakou) | gw-cn-zhangjiakou.wuying.aliyuncs.com | 47.92.158.173 |
Hong Kong (China) | gw-cn-hongkong.wuying.aliyuncs.com |
|
gw-cn-hongkong-198-1-1.wuying.aliyuncs.com |
| |
gw-cn-hongkong-asp-198-1-1.wuying.aliyuncs.com | 47.243.139.20 | |
gw-cn-hongkong-b-10.wuying.aliyuncs.com | 8.210.31.172 | |
gw-cn-hongkong-b-172.wuying.aliyuncs.com | 8.210.25.226 | |
Singapore | gw-ap-southeast-1.wuying.aliyuncs.com | 47.245.107.0 |
gw-ap-southeast-1-asp-198-1-1.wuying.aliyuncs.com | 8.219.78.189 | |
gw-ap-southeast-1b-198-1.wuying.aliyuncs.com | 47.241.117.171 | |
gw-ap-southeast-1b-198-2.wuying.aliyuncs.com | 47.241.46.61 | |
gw-ap-southeast-1b-198-3.wuying.aliyuncs.com | 8.219.68.123 | |
Malaysia (Kuala Lumpur) | gw-ap-southeast-3.wuying.aliyuncs.com | 139.95.5.110 |
Indonesia (Jakarta) | gw-ap-southeast-5.wuying.aliyuncs.com | 139.95.9.120 |
Philippines (Manila) | gw-ap-southeast-6-asp-198-1-1.wuying.aliyuncs.com | 8.212.182.77 |
gw-ap-southeast-6-citrix-198-1-1.wuying.aliyuncs.com | 8.212.132.241 | |
Thailand (Bangkok) | gw-ap-southeast-7.wuying.aliyuncs.com | 8.213.198.65 |
Japan (Tokyo) | gw-ap-northeast-1a-198-2.wuying.aliyuncs.com | 8.211.142.37 |
gw-ap-northeast-1-asp-198-1-1.wuying.aliyuncs.com | 47.245.35.2 | |
gw-ap-northeast-1b-198-1.wuying.aliyuncs.com | 8.209.254.6 | |
UK (London) | gw-eu-west-1.wuying.aliyuncs.com | 8.208.22.154 |
gw-eu-west-1-asp-198-1-1.wuying.aliyuncs.com | 8.208.88.88 | |
gw-eu-west-1-asp-198-2-1.wuying.aliyuncs.com | 8.208.87.178 | |
gw-eu-west-1-asp-198-3-1.wuying.aliyuncs.com | 8.208.13.248 | |
US (Silicon Valley) | gw-us-west-1.wuying.aliyuncs.com | 139.95.7.228 |
gw-us-west-1-asp-198-1-1.wuying.aliyuncs.com | 198.11.181.84 | |
gw-us-west-1-asp-198-2-1.wuying.aliyuncs.com | 47.88.28.67 | |
Germany (Frankfurt) | gw-eu-central-1.wuying.aliyuncs.com | 8.211.57.127 |
SAU (Riyadh - Partner Region) | gw-me-central-1.wuying.aliyuncs.com | 8.213.34.29 |
gw-me-central-1-1b-198-1-1.wuying.aliyuncs.com | 8.213.18.218 |