In Elastic Desktop Service (EDS), if you enable a firewall or use a third-party firewall or proxy in business scenarios, specific ports may be disabled. In this case, end users may fail to log on to Alibaba Cloud Workspace clients and connect to cloud computers. To prevent such issues, you must enable the ports that are described in this topic after you enable a firewall or proxy so that end users can use cloud computers as expected. Data transmitted over the ports are encrypted by using Secure Socket Layer (SSL).
Ports for connection over private networks
Ports at the control layer
Domain name/Service | Port | Description | IP address |
Alibaba Cloud DNS (DNS) | TCP/UDP: 53 | The DNS service in Alibaba Cloud. For more information, see Public Authoritative DNS Resolution. | |
| TCP/UDP: 123 | The clock source of the Network Time Protocol (NTP) server. For more information, see Manage the time synchronization service. | |
ecd-vpc. | TCP: 443 | The cloud management link. | For more information, see the Mappings between regions and domain names in the cloud management link for connection over private networks table in this topic. |
wyota.vpc-proxy.aliyuncs.com | N/A | The private domain name of the over-the-air (OTA) service, which is used when end users log on to Alibaba Cloud Workspace terminals by using organization IDs. Note For more information about the Object Storage Service (OSS) private domain names of the OTA update packages for Alibaba Cloud Workspace terminals in each region, see the OSS private domain names section in this topic. | |
wyota-vpc. | N/A | The private domain name of the OTA service, which is used when end users log on to Alibaba Cloud Workspace terminals by using office network IDs. Note For more information about the Object Storage Service (OSS) private domain names of the OTA update packages for Alibaba Cloud Workspace terminals in each region, see the OSS private domain names section in this topic. | |
appstream-center-vpc. | TCP: 443 | The domain name that is used to access services and cloud applications when end users log on to Alibaba Cloud Workspace terminals by using office network IDs. Note Only Alibaba Cloud Workspace terminals V5.0.1 and later are supported. | |
appstream-center.vpc-proxy.aliyuncs.com | TCP: 443 | The private domain name that is used to access services and cloud applications when end users log on to Alibaba Cloud Workspace terminals by using organization IDs. | |
ecd.vpc-proxy.aliyuncs.com | TCP: 443 | The private domain name that is used to query authorized cloud resources when end users log on to Alibaba Cloud Workspace terminals by using organization IDs. The cloud resources include cloud computers, cloud applications, enterprise drives, and cloud-based browsers. | |
metaspace.vpc-proxy.aliyuncs.com | TCP: 443 | The private domain name of the Alibaba Cloud Workspace collaboration services when you use the stream collaboration feature. |
Mappings between regions and domain names in the cloud management link for connection over private networks
In most cases, the IP addresses in the following table are fixed. The actual IP addresses in your business scenarios shall prevail.
Region | Domain name for managing cloud computers | Domain name for the OTA service | Domain name for accessing services and cloud applications | IP address |
China (Hangzhou) | ecd-vpc.cn-hangzhou.aliyuncs.com | wyota-vpc.cn-hangzhou.aliyuncs.com | appstream-center-vpc.cn-hangzhou.aliyuncs.com | |
China (Shanghai) | ecd-vpc.cn-shanghai.aliyuncs.com | wyota-vpc.cn-shanghai.aliyuncs.com | appstream-center-vpc.cn-shanghai.aliyuncs.com | |
China (Nanjing - Local Region) | ecd-vpc.cn-nanjing.aliyuncs.com | wyota-vpc.cn-nanjing.aliyuncs.com | appstream-center-vpc.cn-nanjing.aliyuncs.com | |
China (Shenzhen) | ecd-vpc.cn-shenzhen.aliyuncs.com | wyota-vpc.cn-shenzhen.aliyuncs.com | appstream-center-vpc.cn-shenzhen.aliyuncs.com | |
China (Beijing) | ecd-vpc.cn-beijing.aliyuncs.com | wyota-vpc.cn-beijing.aliyuncs.com | appstream-center-vpc.cn-beijing.aliyuncs.com | |
China East 1 Finance | ecd-vpc.cn-hangzhou-finance.aliyuncs.com | wyota-vpc.cn-hangzhou-finance.aliyuncs.com | appstream-center-vpc.cn-hangzhou-finance.aliyuncs.com | |
China North 2 Ali Gov 1 | ecd-vpc.cn-north-2-gov-1.aliyuncs.com | wyota-vpc.cn-north-2-gov-1.aliyuncs.com | appstream-center-vpc.cn-north-2-gov-1.aliyuncs.com | |
China (Hong Kong) | ecd-vpc.cn-hongkong.aliyuncs.com | wyota-vpc.cn-hongkong.aliyuncs.com | appstream-center-vpc.cn-hongkong.aliyuncs.com | |
Singapore | ecd-vpc.ap-southeast-1.aliyuncs.com | wyota-vpc.ap-southeast-1.aliyuncs.com | appstream-center-vpc.ap-southeast-1.aliyuncs.com | |
Philippines (Manila) | ecd-vpc.ap-southeast-6.aliyuncs.com | wyota-vpc.ap-southeast-6.aliyuncs.com | appstream-center-vpc.ap-southeast-6.aliyuncs.com | |
Thailand (Bangkok) | ecd-vpc.ap-southeast-7.aliyuncs.com | wyota-vpc.ap-southeast-7.aliyuncs.com | appstream-center-vpc.ap-southeast-7.aliyuncs.com | |
Japan (Tokyo) | ecd-vpc.ap-northeast-1.aliyuncs.com | wyota-vpc.ap-northeast-1.aliyuncs.com | appstream-center-vpc.ap-northeast-1.aliyuncs.com | |
UK (London) | ecd-vpc.eu-west-1.aliyuncs.com | wyota-vpc.eu-west-1.aliyuncs.com | appstream-center-vpc.eu-west-1.aliyuncs.com | |
US (Silicon Valley) | ecd-vpc.us-west-1.aliyuncs.com | wyota-vpc.us-west-1.aliyuncs.com | appstream-center-vpc.us-west-1.aliyuncs.com | |
Germany (Frankfurt) | ecd-vpc.eu-central-1.aliyuncs.com | wyota-vpc.eu-central-1.aliyuncs.com | appstream-central-vpc.eu-central-1.aliyuncs.com | |
SAU (Riyadh - Partner Region) | ecd-vpc.me-central-1.aliyuncs.com | wyota-vpc.me-central-1.aliyuncs.com | appstream-central-vpc.me-central-1.aliyuncs.com | |
OSS private domain names
The following table describes the OSS private domain names of the OTA update packages for Alibaba Cloud Workspace terminals in each region. For more information about the virtual IP address (VIP) ranges in each region, see Internal OSS endpoints and VIP ranges.
Region | Domain name |
China (Hangzhou) | |
China (Shanghai) | |
China (Nanjing - Local Region) | |
China (Shenzhen) | |
China (Beijing) | |
China (Hong Kong) | |
Singapore | |
Philippines (Manila) | |
Thailand (Bangkok) | |
Japan (Tokyo) | |
UK (London) | |
US (Silicon Valley) | |
Germany (Frankfurt) | |
SAU (Riyadh - Partner Region) | |
Ports at the data layer
At the data layer, 30 ports are reserved. To prevent connections from being denied by the system after you scale out cloud computers, we recommend that you open all the 30 ports.
Port/IP address | Description |
TCP/UDP: 5912–5941 | The ports that are used to connect to cloud computers. |
IP address | The domain name of a private gateway. You can perform the following operations to query the domain name: Log on to the EDS console, go to the Office Networks page, find the office network that you want to manage, click the office network ID, and then find the CIDR Block field in the Network Information section to query the domain name of a private gateway. |
Ports for connection over the Internet
Ports at the control layer
Domain name | Port | Description |
wuying.aliyun.com | TCP: 443 | The address of the Alibaba Cloud Workspace client for web. |
ecd. | TCP: 443 | The domain name of the cloud management link in a region. For more information, see the Mappings between regions and domain names in the cloud management link for connection over the Internet table in this topic. |
appstream-center.cn-shanghai.aliyuncs.com | TCP: 443 | The domain name that is used to access services and cloud applications from Alibaba Cloud Workspace terminals (V5.0.1 or later). |
wyota.cn-hangzhou.aliyuncs.com | TCP: 443 | The domain name that is used for the OTA service. |
post-cn-7mz2njrln01.mqtt.aliyuncs.com |
| The domain name that is used for long connections and the message center. |
ecd.cn-shanghai.aliyuncs.com | TCP: 443 | The domain name that is used to log on to Alibaba Cloud Workspace terminals by using organization IDs. |
metaspace.aliyuncs.com | TCP: 443 | The public domain name of the Alibaba Cloud Workspace collaboration service when you use the stream collaboration feature. |
Mappings between regions and domain names in the cloud management link for connection over the Internet
Region | Domain name |
China (Hangzhou) | |
China (Shanghai) | |
China (Nanjing - Local Region) | |
China (Fuzhou - Local Region) | |
China (Shenzhen) | |
China (Beijing) | |
China (Hong Kong) | |
Singapore | |
Philippines (Manila) | |
Thailand (Bangkok) | |
Japan (Tokyo) | |
UK (London) | |
US (Silicon Valley) | |
Germany (Frankfurt) | |
SAU (Riyadh - Partner Region) | |
Ports at the data layer
Port | Description |
TCP/UDP: 5912–5941 | The port that is used when end users connect to cloud computers from the Alibaba Cloud Workspace client. |
TCP: 8008 to 8037 | The port that is used when end users connect to cloud computers from the Alibaba Cloud Workspace client for web. |
Gateway domain name | For more information about gateway domain names in each region, see the Regions and gateway domain names section in this topic. |
Regions and gateway domain names
Region | Gateway domain name | Gateway public IP address |
China (Hangzhou) | gw-cn-hangzhou-asp-198-10-1.wuying.aliyuncs.com | 47.99.37.94 |
gw-cn-hangzhou-asp-198-1-1.wuying.aliyuncs.com | 120.26.141.139 | |
gw-cn-hangzhou-asp-198-11-1.wuying.aliyuncs.com | 120.55.60.130 | |
gw-cn-hangzhou-asp-198-12-1.wuying.aliyuncs.com | 116.62.234.4 | |
gw-cn-hangzhou-asp-198-13-1.wuying.aliyuncs.com | 47.98.131.53 | |
gw-cn-hangzhou-asp-198-14-1.wuying.aliyuncs.com | 118.31.172.147 | |
gw-cn-hangzhou-asp-198-15-1.wuying.aliyuncs.com | 114.55.218.191 | |
gw-cn-hangzhou-asp-198-16-1.wuying.aliyuncs.com | 114.55.142.159 | |
gw-cn-hangzhou-asp-198-2-1.wuying.aliyuncs.com | 47.97.41.234 | |
gw-cn-hangzhou-asp-198-3-1.wuying.aliyuncs.com | 47.114.112.204 | |
gw-cn-hangzhou-asp-198-6-1.wuying.aliyuncs.com | 121.41.79.158 | |
gw-cn-hangzhou-asp-198-7-1.wuying.aliyuncs.com | 47.99.100.44 | |
gw-cn-hangzhou-asp-198-8-1.wuying.aliyuncs.com | 223.4.28.103 | |
gw-cn-hangzhou-asp-198-9-1.wuying.aliyuncs.com | 47.98.224.184 | |
gw-cn-hangzhou-asp-198-17-1.wuying.aliyuncs.com | 47.99.70.244 | |
gw-cn-hangzhou-citrix-198-4-1.wuying.aliyuncs.com | 121.41.102.199 | |
gw-cn-hangzhou-citrix-198-5-1.wuying.aliyuncs.com | 47.110.89.162 | |
gw-cn-hangzhou-cluster-198-2-1.wuying.aliyuncs.com | 121.41.116.41 | |
gw-cn-hangzhou-cluster-198-3-1.wuying.aliyuncs.com | 114.55.254.239 | |
gw-cn-hangzhou-h-10.wuying.aliyuncs.com | 116.62.40.158 | |
gw-cn-hangzhou-h-172.wuying.aliyuncs.com | 118.178.194.34 | |
gw-cn-hangzhou-i-172.wuying.aliyuncs.com | 116.62.166.147 | |
China (Shanghai) | gw-cn-shanghai.wuying.aliyuncs.com | 47.100.45.151 |
gw-cn-shanghai-asp-198-1-1.wuying.aliyuncs.com | 106.15.39.122 | |
gw-cn-shanghai-asp-198-2-1.wuying.aliyuncs.com | 106.14.163.99 | |
gw-cn-shanghai-asp-198-3-1.wuying.aliyuncs.com | 106.15.51.30 | |
gw-cn-shanghai-asp-198-4-1.wuying.aliyuncs.com | 101.132.242.26 | |
gw-cn-shanghai-asp-198-5-1.wuying.aliyuncs.com | 139.196.47.168 | |
gw-cn-shanghai-asp-198-6-1.wuying.aliyuncs.com | 139.196.207.183 | |
gw-cn-shanghai-asp-198-7-1.wuying.aliyuncs.com | 139.196.79.151 | |
gw-cn-shanghai-asp-198-8-1.wuying.aliyuncs.com | 139.196.79.114 | |
gw-cn-shanghai-asp-198-9-1.wuying.aliyuncs.com | 101.133.236.61 | |
gw-cn-shanghai-asp-198-10-1.wuying.aliyuncs.com | 47.103.157.222 | |
gw-cn-shanghai-asp-198-11-1.wuying.aliyuncs.com | 47.116.53.64 | |
gw-cn-shanghai-asp-198-12-1.wuying.aliyuncs.com | 101.132.118.143 | |
gw-cn-shanghai-citrix-198-1-1.wuying.aliyuncs.com | 106.15.39.178 | |
gw-cn-shanghai-g-10.wuying.aliyuncs.com | 139.224.81.68 | |
gw-cn-shanghai-g-172.wuying.aliyuncs.com | 139.196.45.81 | |
gw-pu-cn-shanghai-g-cluster-198-2-1.wuying.aliyuncs.com | 47.102.147.195 | |
China (Nanjing - Local Region) | gw-cn-nanjing-a-cluster-198-1-1.wuying.aliyuncs.com | 47.122.1.255 |
gw-cn-nanjing-a-cluster-198-2-1.wuying.aliyuncs.com | 47.122.0.217 | |
China (Fuzhou - Local Region) | gw-cn-fuzhou.wuying.aliyuncs.com | 47.122.40.132 |
China (Shenzhen) | gw-cn-shenzhen-citrix-198-2-1.wuying.aliyuncs.com | 47.107.245.75 |
gw-cn-shenzhen-d-10.wuying.aliyuncs.com | 8.129.19.124 | |
gw-cn-shenzhen-d-172.wuying.aliyuncs.com | 8.129.6.242 | |
gw-cn-shenzhen-e-198-1-1.wuying.aliyuncs.com | 47.107.84.196 | |
gw-cn-shenzhen-e-198-1-2.wuying.aliyuncs.com | 120.79.5.200 | |
gw-cn-shenzhen-e-198-3-1.wuying.aliyuncs.com | 39.108.228.191 | |
gw-cn-shenzhen-e-asp-198-4-1.wuying.aliyuncs.com | 120.78.78.123 | |
gw-cn-shenzhen-asp-198-5-1.wuying.aliyuncs.com | 120.77.179.236 | |
China (Beijing) | gw-cn-beijing.wuying.aliyuncs.com | 59.110.234.227 |
gw-cn-beijing-asp-198-1-1.wuying.aliyuncs.com | 39.105.111.115 | |
gw-cn-beijing-asp-198-2-1.wuying.aliyuncs.com | 101.201.142.67 | |
gw-cn-beijing-asp-198-5-1.wuying.aliyuncs.com | 101.201.64.154 | |
gw-cn-beijing-asp-198-6-1.wuying.aliyuncs.com | 123.56.87.238 | |
gw-cn-beijing-asp-198-7-1.wuying.aliyuncs.com | 182.92.233.120 | |
gw-cn-beijing-asp-198-8-1.wuying.aliyuncs.com | 123.56.217.151 | |
gw-cn-beijing-citrix-198-4-1.wuying.aliyuncs.com | 101.201.152.1 | |
gw-cn-beijing-h-10.wuying.aliyuncs.com | 123.56.55.48 | |
gw-cn-beijing-h-172.wuying.aliyuncs.com | 123.56.55.12 | |
gw-cn-beijing-h-198-1-1.wuying.aliyuncs.com | 39.106.230.144 | |
gw-cn-beijing-h-198-2-1.wuying.aliyuncs.com | 123.56.165.121 | |
China (Hong Kong) | gw-cn-hongkong.wuying.aliyuncs.com | 139.95.1.150 |
gw-cn-hongkong-198-1-1.wuying.aliyuncs.com | 8.218.145.193 | |
gw-cn-hongkong-asp-198-1-1.wuying.aliyuncs.com | 47.243.139.20 | |
gw-cn-hongkong-b-10.wuying.aliyuncs.com | 8.210.31.172 | |
gw-cn-hongkong-b-172.wuying.aliyuncs.com | 8.210.25.226 | |
Singapore | gw-ap-southeast-1-asp-198-1-1.wuying.aliyuncs.com | 8.219.78.189 |
gw-ap-southeast-1b-198-1.wuying.aliyuncs.com | 47.241.117.171 | |
gw-ap-southeast-1b-198-2.wuying.aliyuncs.com | 47.241.46.61 | |
gw-ap-southeast-1b-198-3.wuying.aliyuncs.com | 8.219.68.123 | |
Malaysia (Kuala Lumpur) | gw-ap-southeast-3.wuying.aliyuncs.com | 139.95.5.110 |
Indonesia (Jakarta) | gw-ap-southeast-5.wuying.aliyuncs.com | 139.95.9.120 |
Philippines (Manila) | gw-ap-southeast-6-asp-198-1-1.wuying.aliyuncs.com | 8.212.182.77 |
gw-ap-southeast-6-citrix-198-1-1.wuying.aliyuncs.com | 8.212.132.241 | |
Thailand (Bangkok) | gw-ap-southeast-7.wuying.aliyuncs.com | 8.213.198.65 |
Japan (Tokyo) | gw-ap-northeast-1a-198-2.wuying.aliyuncs.com | 8.211.142.37 |
gw-ap-northeast-1-asp-198-1-1.wuying.aliyuncs.com | 47.245.35.2 | |
gw-ap-northeast-1b-198-1.wuying.aliyuncs.com | 8.209.254.6 | |
UK (London) | gw-eu-west-1-asp-198-1-1.wuying.aliyuncs.com | 8.208.88.88 |
gw-eu-west-1-asp-198-2-1.wuying.aliyuncs.com | 8.208.87.178 | |
US (Silicon Valley) | gw-us-west-1.wuying.aliyuncs.com | 139.95.7.228 |
gw-us-west-1-asp-198-1-1.wuying.aliyuncs.com | 198.11.181.84 | |
gw-us-west-1-asp-198-2-1.wuying.aliyuncs.com | 47.88.28.67 | |
Germany (Frankfurt) | gw-eu-central-1.wuying.aliyuncs.com | 8.211.57.127 |
SAU (Riyadh - Partner Region) | gw-me-central-1-1b-198-1-1.wuying.aliyuncs.com | 8.213.18.218 |