Install and use behind a firewall or proxy server - Visual Studio (Windows) (2023)

URL
resolutiongo.microsoft.com

aka.ms

Used to shorten URLs, which then resolve into longer URLsStart Pagevsstartpage.blob.core.windows.net443Used to display Developer News shown on the start page (Visual Studio 2017 only)Targeted
Notification
Servicetargetednotifications-tm.trafficmanager.net

www.research.net

443

443

Used to filter a global list of notifications to a list that is applicable only to specific types of machines/usage scenariosExtension
update checkmarketplace.visualstudio.com

*.windows.net
*.microsoftonline.com
*.live.com

443Used to provide notifications when an installed extension has an update available

Used as a sign-in location

AI Project
Integrationaz861674.vo.msecnd.net443
Used to configure new projects to send usage data to your registered Application Insights accountCode Lenscodelensprodscus1su0.app.
codelens.visualstudio.com443Used to provide information in the editor about when a file was last updated, the timeline of changes, the work items that changes are associated with, the authors, and moreExperimental
feature enablingvisualstudio-devdiv-c2s.msedge.net80Used to activate experimental new features or feature changesIdentity "badge"
(user name and avatar)
and
Roaming settingsapp.vssps.visualstudio.com

app.vsspsext.visualstudio.com

app.vssps.visualstudio.com

ns-sb2-prod-ch1-002.cloudapp.net

az700632.vo.msecnd.net

api.vstsusers.visualstudio.com/profiles/*

443Used to display the user's name and avatar in the IDE

Used to make sure that setting changes roam from one machine to another

Remote Settingsaz700632.vo.msecnd.net443Used to turn off extensions that are known to cause problems in Visual StudioWindows Toolsdeveloper.microsoft.com

dev.windows.com

appdev.microsoft.com

https/443Used for Windows app store scenariosJSON Schema
Discovery

JSON Schema
Definition

JSON Schema
Support for
Azure Resources

json.schemastore.org
schemastoreorg.azurewebsites.net

json-schema.org

schema.management.azure.com

http/80
https/443

http/80

https/443

Used to discover and download JSON schemas that the user might use when editing JSON documents

Used to obtain the meta-validation schema for JSON

Used to obtain the current schema for Azure Resource Manager deployment templates

NPM package
discoverySkimdb.npmjs.com

Registry.npmjs.org

Api.npms.io

https/443

http/80 &
https/443
https/443

Required for searching for NPM packages, and used for client-side script package installation in web projectsBower package
icons

Bower package
search

Bower.io

bowercache.azurewebsites.net
go.microsoft.com
Registry.bower.io

http/80

https/443
http/80
https/443

Provides the default bower package icon

Provides the ability to search for Bower packages

NuGet

NuGet package
discovery

api.nuget.org
www.nuget.org
nuget.org
azuresearch-usnc.nuget.org
azuresearch-ussc.nuget.org
licenses.nuget.org
nuget.cdn.azure.cn
azuresearch-ea.nuget.org
azuresearch-sea.nuget.org

crl3.digicert.com
crl4.digicert.com
ocsp.digicert.com
cacerts.digicert.com

https/443

http/80 &
https/443

Used to verify signed NuGet packages.

Required for searching for NuGet packages and versions

GitHub repository informationapi.github.comhttps/443Required for getting additional information about bower packagesWeb LintersEslint.org

www.Bing.com

www.coffeelint.org

http/80Cookiecutter
Explorer template
discovery

Cookiecutter
Explorer project
creation

api.github.com
raw.githubusercontent.com
go.microsoft.com

pypi.org
pypi.python.org

https/443
Used to discover online templates from our recommended feed and from GitHub repositories

Used to create a project from a cookiecutter template that requires a one-time on-demand installation of a cookiecutter Python package from the Python package index (PyPI)

Python package
discovery

Python package
management

New
Python
project
templates

pypi.org

pypi.python.org
bootstrap.pypa.io

go.microsoft.com

https/443Provides the ability to search for pip packages

Used to install pip automatically if it is missing

Used to resolve the following new Python project templates to cookiecutter template URLs:
- Classifier Project
- Clustering Project
- Regression Project
- PyGame using PyKinect
- Pyvot Project

Office web
add-in
Manifest
Verification
Serviceverificationservice.osi.office.nethttps/443Used to validate manifests for Office web add-insSharePoint and
Office Add-inssharepoint.com
microsoft.com/microsoft-365
microsoftonline.com
outlook.comhttps/443Used to publish and test SharePoint and Office Add-ins to SharePoint Online and Microsoft 365Workflow Manager
Test Service
Hosthttp/12292A firewall rule that is created automatically for testing SharePoint add-ins with workflowsAutomatically collected
reliability statistics
and other
Customer Experience
Improvement Programs (CEIP)
for Azure SDK and
for SQL Tools vortex.data.microsoft.com

dc.services.visualstudio.com

https/443Used to send reliability statistics (crash/unresponsive data) from the user to Microsoft. Actual crash/unresponsive dumps will still be uploaded if Windows Error Reporting is enabled; only statistical information will be suppressed;
Used to reveal usage patterns for the Azure Tools SDK extension to Visual Studio, and for usage patterns for the SQL tooling to Visual StudioVisual Studio
Customer Experience
Improvement Program (CEIP)

PerfWatson.exe

vortex.data.microsoft.com
dc.services.visualstudio.com
visualstudio-devdiv-c2s.msedge.net
az667904.vo.msecnd.net
scus-breeziest-in.cloudapp.net
https/443Used to collect usage patterns and error logs

Used to track UI freeze issues

Creation and
Management of
Azure resourcesmanagement.azure.com
management.core.windows.nethttps/443Used for creating Azure Websites or other resources to support the publishing of web applications, Azure Functions, or WebJobsUpdated web publish tooling
checks and extension
recommendationsmarketplace.visualstudio.comhttps/443Used for checking for the availability of updated publish tooling. If disabled, a potential recommended extension for web publishing may not be shownUpdated Azure Resource
Creation Endpoint Information*.blob.core.windows.nethttps/443Used to update the endpoints used for the creation of Azure Resources for certain Azure Services. If disabled, the last downloaded or built in endpoint locations are used insteadRemote debugging and
Remote profiling of
Azure Websites*.cloudapp.net
*.azurewebsites.net4022Used for attaching the remote debugger to Azure Websites. If disabled, attaching the remote debugger to Azure Websites will not workActive Directory
Graphgraph.windows.nethttps/443Used to provision new Azure Active Directory applications. Also used by the Microsoft 365 MSGraph- connected service providerAzure Functions
CLI Update
Checkfunctionscdn.azureedge.nethttps/443Used for checking for updated versions of the Azure Functions CLI. If disabled, a cached copy (or the copy carried by the Azure Functions component) of the CLI will be used insteadCordovanpmjs.org
gradle.orghttp/80 &
https/443HTTP is used for Gradle downloads during build; HTTPS is used to include Cordova plug-ins in projectsCloud Explorer1. <clusterendpoint>
Service Fabric
2. <management endpoint>
General Cloud Exp
3. <graph endpoint>
General Cloud Exp
4. <storage account endpoint>
Storage Nodes
5. <Azure portal URLs>
General Cloud Exp
6. <key vault endpoints>
Azure Resource Manager VM Nodes
7. <PublicIPAddressOfCluster>
Service Fabric Remote debugging and ETW Traces
1.https/19080
2. https/443
3. https/443
4. https/443
5. https/443
6. https/443
7.tcp/dynamic1. Example: test12.eastus.cloudapp.com
2. Retrieves subscriptions and retrieves/manages Azure resources
3. Retrieves Azure Stack subscriptions
4. Manages Storage resources (example: mystorageaccount.blob.core.windows.net)
5. "Open in Portal" context menu option (opens a resource in the Azure portal)
6. Creates and uses key vaults for VM debugging (Example: myvault.vault.azure.net)

7. Dynamically allocates block of ports based on number of nodes in the cluster and the available ports. 

A port block will try to get three times the number of nodes with minimum of 10 ports.

For Streaming traces, an attempt is made to get the port block from 810. If any of that port block is already used, then an attempt is made to get the next block, and so on. (It the load balancer is empty, then ports from 810 are most likely used)

Similarly for debugging, four sets of the ports blocks are reserved:
- connectorPort: 30398, 
- forwarderPort: 31398, 
- forwarderPortx86: 31399,
- fileUploadPort: 32398

Cloud Services1. RDP

2. core.windows.net

3. management.azure.com
management.core.windows.net

4. *.blob.core.windows.net
*.queue.core.windows.net
*.table.core.windows.net

5. portal.azure.com

6. <user's cloud service>.cloudapp.net
<user's VM>.<region>.azure.com

1. rdp/3389

2. https/443

3. https/443

4. https/443

5. https/443

6. tcp
a) 30398
b) 30400
c) 31398
d) 31400
e) 32398
f) 32400

1. Remote Desktop to Cloud Services VM

2. Storage account component of the private diagnostics configuration

3. Azure portal

4. Server Explorer - Azure Storage * is customer named storage account

5. Links to open the portal / Download the subscription certificate / Publish settings file

6. a) Connector local port for remote debug for cloud service and VM
6. b) Connector public port for remote debug for cloud service and VM
6. c) Forwarder local port for remote debug for cloud service and VM
6. d) Forwarder public port for remote debug for cloud service and VM
6. e) File uploader local port for remote debug for cloud service and VM
6. f) File uploader public port for remote debug for cloud service and VM

Service Fabric1.
learn.microsoft.com
aka.ms
go.microsoft.com

2.
vssftools.blob.core.windows.net
Vault.azure.com
Portal.azure.com

3. * vault.azure.net

4.
app.vsaex.visualstudio.com
* .vsspsext.visualstudio.com
clouds.vsrm.visualstudio.com
clouds.visualstudio.com
app.vssps.visualstudio.com
* .visualstudio.com

https/4431. Documentation

2. Create Cluster feature

3. The * is the Azure key vault name (Example:- test11220180112110108.vault.azure.net

4. The * is dynamic (Example: vsspsextprodch1su1.vsspsext.visualstudio.com)

Snapshot
Debugger1. go.microsoft.com
2. management.azure.com
3. *.azurewebsites.net
4. *.scm.azurewebsites.net
5. api.nuget.org/v3/index.json
6. Remote Service/Servers IP address/FQDN1. https/443
2. https/443
3. http/80
4. https/443
5. https/443
6. Concord/
4022 (Visual Studio version dependent)1. Query .json file for app service SKU size
2. Various Azure RM calls
3. Site warmup call via
4. Customer's targeted App Service Kudu endpoint
5. Query Site Extension version published in nuget.org
6. Remote debuggingAzure Stream Analytics

HDInsight

Management.azure.comhttps/443Used to view, submit, run, and manage ASA jobs

Used to browse HDI clusters, and to submit, diagnose, and debug HDI jobs

Azure Data Lake*.azuredatalakestore.net
*.azuredatalakeanalytics.nethttps/443Used to compile, submit, view, diagnose, and debug jobs; used to browse ADLS files; used to upload and download filesPackaging Service[account].visualstudio.com
[account].*.visualstudio.com
*.blob.core.windows.net
registry.npmjs.org
nodejs.org
dist.nuget.org
nuget.orghttps/443The *.npmjs.org, *.nuget.org, and *.nodejs.org are only required for certain build task scenarios (for example: NuGet Tool Installer, Node Tool Installer) or if you intend to use public upstream with your Feeds. The other three domains are required for core functionality of the Packaging service.Azure DevOps Services*.vsassets.io
static2.sharepointonline.com
dev.azure.comUsed to connect with Azure DevOps ServicesAzure Service Bus*.servicebus.windows.netampq/5671 and 5672,
sbmp/9350-9354,
http/80,
https/443Used to create queues, topics, and subscriptions.
Also used to send/receive messages to/from Service Bus queues and topics.Azure Cosmos DB*.documents.azure.comhttps/443Used to call core document database APIs.Developer Communitysendvsfeedback2.azurewebsites.net/apihttps/443Used to call Developer Community Feedback Tool APIs (my issues, search, vote, comment, submit, upload, resume)Intellicode*.intellicode.vsengsaas.visualstudio.comhttps/443Used to call Intellicode APIsLive Share*.liveshare.vsengsaas.visualstudio.comhttps/443Used to call Live Share APIsGitHub Codespaces*.online.visualstudio.comhttps/443Used to call GitHub Codespaces APIsJavaScript Automatic Type Acquisitionregistry.npmjs.orghttps/443Used to install TypeScript type definitions to provide IntelliSense for popular JavaScript librariesVisual Studio Subscriptions Licensing Serviceapp.vssps.visualstudio.com/apis/
Licensing/ClientRightshttps/443Licensing for online activationDebugger1.
vsdebugger.blob.core.windows.net
vsdebugger.azureedge.net

2.
download.visualstudio.com/*/
onecore.msvsmon.*.zip

3. referencesource.microsoft.com/symbols

4.
symbols.nuget.org/download/symbols

5. visualstudio.com

6. msdl.microsoft.com/download/symbols

https/4431.
Used for downloading debugger bits for .NET Core debugging on Unix / macOS over SSH

2.
Used for downloading debugger bits for remote Windows Docker container debugging

3. Used for .NET Framework source stepping

4.
(If user opts-in) Used for downloading symbols published to nuget.org symbol server.

5. (If user opts-in) Used for downloading MS symbols and binaries, might also be needed for debugging managed code in dumps

GitHub Codespaces*.online.visualstudio.comhttps/443Used to call GitHub Codespaces APIsXamarin Android App Publishing*.googleapis.com
play.google.com
accounts.google.comhttps/443Used to interact with Google Play Store service to publish/upload Xamarin Android Applications directly from Visual Studio.Visual Studio Search Servicedata-ai.microsoft.com/searchhttps/443Used to provide AI-enabled Visual Studio Search Service in Ctrl+Q search boxAzure Container Registry*.azurecr.iohttps/443Access container registries hosted on Azure, for configuration of CICD pipelinesVisual Studio for Mac Updatersoftware.xamarin.comhttps/443Used to get the list of available updatesVisual Studio for Mac Error Reportingnw-umwatson.events.data.microsoft.comhttps/443Used to collect reliability reports for crashes, unresponsiveness, and delays