Skip to main content

为 Copilot 配置代理服务器或防火墙

应允许某些流量通过防火墙或代理服务器,以使 Copilot 按预期工作。

谁可以使用此功能?

Proxy server maintainers or firewall maintainers

如果公司采用防火墙或代理服务器等安全措施,则应将以下 URL、端口和协议添加到允许列表,以确保 Copilot 按预期工作:

GitHub Enterprise 相关的 URL

域和/或 URL用途
https://github.com/YOUR-ENTERPRISE/*Enterprise URL
https://github.com/YOUR-ENTERPRISE?*Enterprise URL
https://github.com/enterprises/YOUR-ENTERPRISE/*对 托管用户帐户 的身份验证,仅 Enterprise Managed Users 需要

GitHub 公共 URL

域和/或 URL用途
https://github.com/login/*身份验证,仅适用于个人用户
https://github.com/login?*身份验证,仅适用于个人用户
https://github.com/login/oauth/*仅使用 Enterprise Managed Users 时需进行身份验证
https://api.github.com/user/*用户管理
https://github.com/favicon.icoIcon
https://github.com/account/*帐户
https://github.com/settings/*设置
https://avatars.githubusercontent.com/*头像
https://github.com/copilot/*Copilot
https://raw.githubusercontent.com/*原始内容
https://github.githubassets.com/*GitHub 资产
https://collector.github.com/*收集器
https://github.com/github-copilot/*GitHub Copilot
https://api.github.com/*API
https://github.com/notifications/*通知
https://github.com/session/*会话
https://github.com/dashboard/*仪表板
https://github.com/dashboard?*仪表板
https://github.com/logout/*注销
https://github.com/logout?*注销
https://github.com/switch_account?*切换帐户
https://github.com/switch_account/*切换帐户

Copilot 相关的 URL

域和/或 URL用途
https://api.github.com/copilot_internal/*用户管理
https://copilot-telemetry.githubusercontent.com/telemetry/*遥测
https://default.exp-tas.com/*遥测
https://copilot-proxy.githubusercontent.com/*Copilot 建议的 API 服务
https://origin-tracker.githubusercontent.com/*Copilot 建议的 API 服务
https://*.githubcopilot.com/*1Copilot 建议的 API 服务
https://*.individual.githubcopilot.com/*2Copilot 建议的 API 服务
https://*.business.githubcopilot.com/*3Copilot 建议的 API 服务
https://*.enterprise.githubcopilot.com/*4Copilot 建议的 API 服务

如果组织使用 Microsoft Entra ID,则还需要将以下 URL 添加到允许列表:

  • https://login.microsoftonline.com/*
  • https://aadcdn.msauth.net/*
  • https://login.live.com/*
  • https://*.activedirectory.windowsazure.com/*

根据组织使用的安全策略和编辑器,可能需要将其他域和 URL 加入允许列表中。 有关特定编辑器的详细信息,请参阅延伸阅读

代理服务器或防火墙的每个用户还需要配置自己的环境以连接到 Copilot。 请参阅“为 GitHub Copilot 配置网络设置”。

其他阅读材料

Footnotes

  1. Allows access to authorized users regardless of Copilot plan. Do not add this URL to your allowlist if you are using subscription-based network routing. For more information on subscription-based network routing, see 管理 GitHub Copilot 对企业网络的访问权限.

  2. Allows access to authorized users via a Copilot Individual plan. Do not add this URL to your allowlist if you are using subscription-based network routing.

  3. Allows access to authorized users via a Copilot Business plan. Do not add this URL to your allowlist if you want to use subscription-based network routing to block users from using Copilot Business on your network.

  4. Allows access to authorized users via a Copilot Enterprise plan. Do not add this URL to your allowlist if you want to use subscription-based network routing to block users from using Copilot Enterprise on your network.