Configuring your proxy server or firewall for Copilot

You should allow certain traffic through your firewall or proxy server for Copilot to work as intended.

Who can use this feature?

Proxy server maintainers or firewall maintainers

GitHub Copilot Individual, GitHub Copilot Business, or GitHub Copilot Enterprise.

If your company employs security measures like a firewall or proxy server, you should add the following URLs, ports, and protocols to an allowlist to ensure Copilot works as expected:

Domain and/or URLPurpose
https://github.com/login/*Authentication
https://api.github.com/userUser Management
https://api.github.com/copilot_internal/*User Management
https://copilot-telemetry.githubusercontent.com/telemetryTelemetry
https://default.exp-tas.com/Telemetry
https://copilot-proxy.githubusercontent.com/API service for Copilot suggestions
https://origin-tracker.githubusercontent.comAPI service for Copilot suggestions
https://*.githubcopilot.comAPI service for Copilot suggestions

Depending on the security policies and editors your organization uses, you may need to allowlist additional domains and URLs. For more information on specific editors, see "Further reading."

Every user of the proxy server or firewall also needs to configure their own environment to connect to Copilot. See "Configuring network settings for GitHub Copilot."

Further reading