If you enable a firewall or use a third-party firewall or proxy in business scenarios, specific ports may be disabled. In this case, end users may fail to log on to Alibaba Cloud Workspace clients (hereinafter referred to as WUYING clients) and connect to cloud computers. To prevent such issues, you must enable the ports that are described in this topic after you enable a firewall or proxy to ensure that cloud computers can be used as expected. Data transmitted over the ports are encrypted by using Secure Socket Layer (SSL).
Ports for connection over private networks
Ports at the control layer
Domain name/Service | Port | Description | IP address |
Alibaba Cloud DNS (DNS) | TCP/UDP: 53 | The DNS service in Alibaba Cloud. For more information, see Public Authoritative DNS Resolution. | |
| TCP/UDP: 123 | The clock source of the Network Time Protocol (NTP) server. For more information, see Manage the time synchronization service. | |
ecd-vpc. | TCP: 443 | The cloud management link. | For more information, see the Mappings between regions and domain names in the cloud management link for connection over private networks table in this topic. |
wyota-vpc. | N/A | The private domain name of the over-the-air (OTA) service, which is used when end users log on to WUYING terminals by using office network IDs. | |
appstream-center-vpc. | TCP: 443 | The domain name that is used to access services and cloud applications when end users log on to WUYING terminals (V5.0.1 or later) by using office network IDs. |
Mappings between regions and domain names in the cloud management link for connection over private networks
In most cases, the IP addresses in the following table are fixed. The actual IP addresses in your business scenarios shall prevail.
Region | Domain name for managing cloud computers | Domain name for the OTA service | Domain name for accessing services and cloud applications | IP address |
China (Hangzhou) | ecd-vpc.cn-hangzhou.aliyuncs.com | wyota-vpc.cn-hangzhou.aliyuncs.com | appstream-center-vpc.cn-hangzhou.aliyuncs.com | |
China (Shanghai) | ecd-vpc.cn-shanghai.aliyuncs.com | wyota-vpc.cn-shanghai.aliyuncs.com | appstream-center-vpc.cn-shanghai.aliyuncs.com | |
China (Shenzhen) | ecd-vpc.cn-shenzhen.aliyuncs.com | wyota-vpc.cn-shenzhen.aliyuncs.com | appstream-center-vpc.cn-shenzhen.aliyuncs.com | |
China (Beijing) | ecd-vpc.cn-beijing.aliyuncs.com | wyota-vpc.cn-beijing.aliyuncs.com | appstream-center-vpc.cn-beijing.aliyuncs.com | |
China East 1 Finance | ecd-vpc.cn-hangzhou-finance.aliyuncs.com | wyota-vpc.cn-hangzhou-finance.aliyuncs.com | appstream-center-vpc.cn-hangzhou-finance.aliyuncs.com | |
China North 2 Ali Gov 1 | ecd-vpc.cn-north-2-gov-1.aliyuncs.com | wyota-vpc.cn-north-2-gov-1.aliyuncs.com | appstream-center-vpc.cn-north-2-gov-1.aliyuncs.com | |
China (Hong Kong) | ecd-vpc.cn-hongkong.aliyuncs.com | wyota-vpc.cn-hongkong.aliyuncs.com | appstream-center-vpc.cn-hongkong.aliyuncs.com | |
Singapore | ecd-vpc.ap-southeast-1.aliyuncs.com | wyota-vpc.ap-southeast-1.aliyuncs.com | appstream-center-vpc.ap-southeast-1.aliyuncs.com | |
Australia (Sydney) | ecd-vpc.ap-southeast-2.aliyuncs.com | wyota-vpc.ap-southeast-2.aliyuncs.com | appstream-center-vpc.ap-southeast-2.aliyuncs.com | |
Philippines (Manila) | ecd-vpc.ap-southeast-6.aliyuncs.com | wyota-vpc.ap-southeast-6.aliyuncs.com | appstream-center-vpc.ap-southeast-6.aliyuncs.com | |
Thailand (Bangkok) | ecd-vpc.ap-southeast-7.aliyuncs.com | wyota-vpc.ap-southeast-7.aliyuncs.com | appstream-center-vpc.ap-southeast-7.aliyuncs.com | |
Japan (Tokyo) | ecd-vpc.ap-northeast-1.aliyuncs.com | wyota-vpc.ap-northeast-1.aliyuncs.com | appstream-center-vpc.ap-northeast-1.aliyuncs.com | |
UK (London) | ecd-vpc.eu-west-1.aliyuncs.com | wyota-vpc.eu-west-1.aliyuncs.com | appstream-center-vpc.eu-west-1.aliyuncs.com | |
US (Silicon Valley) | ecd-vpc.us-west-1.aliyuncs.com | wyota-vpc.us-west-1.aliyuncs.com | appstream-center-vpc.us-west-1.aliyuncs.com | |
Germany (Frankfurt) | ecd-vpc.eu-central-1.aliyuncs.com | wyota-vpc.eu-central-1.aliyuncs.com | appstream-central-vpc.eu-central-1.aliyuncs.com | |
SAU (Riyadh - Partner Region) | ecd-vpc.me-central-1.aliyuncs.com | wyota-vpc.me-central-1.aliyuncs.com | appstream-central-vpc.me-central-1.aliyuncs.com | |
OSS private domain names
The following table describes the Object Storage Service (OSS) private domain names of the OTA update packages for WUYING terminals in each region.
Region | Domain name |
China (Hangzhou) | |
China (Shanghai) | |
| |
China (Shenzhen) | |
China (Beijing) | |
China (Hong Kong) | |
Singapore | |
Australia (Sydney) | |
Philippines (Manila) | |
Thailand (Bangkok) | |
Japan (Tokyo) | |
UK (London) | |
US (Silicon Valley) | |
Germany (Frankfurt) | |
SAU (Riyadh - Partner Region) | |
Ports at the data layer
At the data layer, 30 ports are reserved. To prevent connections from being denied by the system after you scale out cloud computers, we recommend that you open all the 30 ports.
Port/IP address | Description |
TCP/UDP: 5912–5941 | The ports that are used to connect to cloud computers. |
IP address | The domain name of the private gateway. You can perform the following operations to query the domain name: Log on to the WUYING Workspace (Pro Edition) console, go to the Office Network (Formerly Workspace) page, find the office network that you want to manage, click the office network ID, find the CIDR Block field in the Network section of the details page, and then view the domain name of the private gateway. |
Ports for connection over the Internet
Ports at the control layer
Domain name | Port | Description |
wuying.aliyun.com | TCP: 443 | The address of the WUYING client for web. |
ecd. | TCP: 443 | The domain name of the cloud management link. For more information, see the Mappings between regions and domain names in the cloud management link for connection over the Internet table in this topic. |
appstream-center.cn-shanghai.aliyuncs.com | TCP: 443 | The domain name that is used to access services and cloud applications from WUYING terminals (V5.0.1 or later). |
wyota.cn-hangzhou.aliyuncs.com | TCP: 443 | The domain name that is used for the OTA service. |
post-cn-7mz2njrln01.mqtt.aliyuncs.com |
| The domain name that is used for long connections and the message center. |
Mappings between regions and domain names in the cloud management link for connection over the Internet
Region | Domain name |
China (Hangzhou) | |
China (Shanghai) | |
| |
China (Shenzhen) | |
China (Beijing) | |
China (Hong Kong) | |
Singapore | |
Australia (Sydney) | |
Philippines (Manila) | |
Japan (Tokyo) | |
Thailand (Bangkok) | |
UK (London) | |
US (Silicon Valley) | |
Germany (Frankfurt) | |
SAU (Riyadh - Partner Region) | |
Ports at the data layer
Port | Description |
TCP/UDP: 5912 | The port that is used when end users connect to cloud computers from WUYING software clients. |
TCP: 8008 | The port that is used when end users connect to cloud computers from WUYING clients for web. |
Gateway domain name | For more information about gateway domain names in different regions, see Regions and gateway domain names. |
Regions and gateway domain names
Region | Gateway domain name |
China (Hangzhou) | |
China (Shanghai) | |
China (Shenzhen) | |
China (Beijing) | |
China (Hong Kong) | |
Singapore | |
Australia (Sydney) | |
Philippines (Manila) | |
Thailand (Bangkok) | |
Japan (Tokyo) | |
UK (London) | |
US (Silicon Valley) | |
Germany (Frankfurt) | |
SAU (Riyadh - Partner Region) | |