Skip to main content

Set up your school web filtering for Third Space Learning

This article explains the essential changes you will need to make for Third Space Learning to work in your school.

C
Written by Clare Renshaw
Updated over a week ago

For teachers and students to use the Third Space Learning platform and Virtual classroom, a few simple changes need to be made to your school’s firewall and / or web filtering system. This document lists the essential changes you (or your IT team) will need to make to ensure Third Space Learning sessions can run effectively in your school.

If you have any concerns about the feasibility of implementing these changes in your school then please speak to your program manager or our support team.

The required set up is different depending on whether your school uses a firewall, proxy, web filter or a combination of the three. Please see the relevant sections below.

If you would like more information on why we require the following changes for Third Space Learning to function effectively, please read the Third Space Learning services section below.


Firewall

If your school uses a firewall, the following destinations and ports need to be whitelisted.

Service

Destination

Ports (Inbound & outbound)

Third Space Learning platform

*.thirdspacelearning.us

TCP/443

thirdspacelearning.us

TCP/443

Virtual Classroom Audio layer

chime.aws

TCP/443

*.chime.aws

TCP/443

*.amazonaws.com

TCP/443

99.77.128.0/18

TCP/443, UDP/3478

Error logging and reporting

api.rollbar.com

TCP/443

Feature flagging

*launchdarkly.com

TCP/443


Proxy or Web filter

If your school uses a proxy or web filter that blocks HTTPS traffic on port 443 you should put the following urls on an allow list. You need to make sure:

  • HTTPS decryption is disabled for these URLs

  • It proxies WebSockets as well as HTTPS

Service

URL

Third Space Learning Platform

*.thirdspacelearning.us

thirdspacelearning.us

s3-eu-west-1.amazonaws.com/thirdspacelearning-production

tsl-static.s3.eu-west-2.amazonaws.com

Virtual Classroom Audio layer

chime.aws

*.chime.aws

*.amazonaws.com

99.77.128.0/18

Error logging and reporting

api.rollbar.com

Feature flagging

*launchdarkly.com


Third Space Learning services

Third Space Learning Platform

The TSL platform is hosted by Amazon Web Services (AWS) and uses the Simple Storage Service (S3). For the platform to function properly, you need to make the changes outlined in the table above.

Third Space Learning Virtual Classroom

The Third Space Learning virtual classroom allows tutors and students to communicate through distinct audio and messaging layers.

Audio

Tutors and students communicate through a secure, shared audio-only channel using the Amazon Chime SDK (https://aws.amazon.com/chime/chime-sdk/), which uses WebRTC (https://en.wikipedia.org/wiki/WebRTC).

Messaging

We use Ably (https://ably.com/) for non-audio classroom communication. The messaging layer works through the *thirdspacelearning.us domain.

Rollbar

We use Rollbar (https://rollbar.com/) for error logging and reporting.

LaunchDarkly

We use LaunchDarkly (https://launchdarkly.com/) to selectively release features and platform changes to our users.


Document version history

Version

Date

Changes

1.0

5 Sep 2025

Initial version

Did this answer your question?