For teachers and students to use the Third Space Learning platform and Virtual classroom, a few simple changes need to be made to your school’s firewall and / or web filtering system. This document lists the essential changes you (or your IT team) will need to make to ensure Third Space Learning sessions can run effectively in your school.
If you have any concerns about the feasibility of implementing these changes in your school then please speak to your program manager or our support team.
The required set up is different depending on whether your school uses a firewall, proxy, web filter or a combination of the three. Please see the relevant sections below.
If you would like more information on why we require the following changes for Third Space Learning to function effectively, please read the Third Space Learning services section below.
Firewall
If your school uses a firewall, the following destinations and ports need to be whitelisted.
Service | Destination | Ports (Inbound & outbound) |
Third Space Learning platform | *.thirdspacelearning.us | TCP/443 |
| thirdspacelearning.us | TCP/443 |
Virtual Classroom Audio layer | chime.aws | TCP/443 |
| *.chime.aws | TCP/443 |
| *.amazonaws.com | TCP/443 |
| 99.77.128.0/18 | TCP/443, UDP/3478 |
Error logging and reporting | api.rollbar.com | TCP/443 |
Feature flagging | *launchdarkly.com | TCP/443 |
Proxy or Web filter
If your school uses a proxy or web filter that blocks HTTPS traffic on port 443 you should put the following urls on an allow list. You need to make sure:
HTTPS decryption is disabled for these URLs
It proxies WebSockets as well as HTTPS
Service | URL |
Third Space Learning Platform | *.thirdspacelearning.us |
| thirdspacelearning.us |
| s3-eu-west-1.amazonaws.com/thirdspacelearning-production |
| tsl-static.s3.eu-west-2.amazonaws.com |
Virtual Classroom Audio layer | chime.aws |
| *.chime.aws |
| *.amazonaws.com |
| 99.77.128.0/18 |
Error logging and reporting | api.rollbar.com |
Feature flagging | *launchdarkly.com |
Third Space Learning services
Third Space Learning Platform
The TSL platform is hosted by Amazon Web Services (AWS) and uses the Simple Storage Service (S3). For the platform to function properly, you need to make the changes outlined in the table above.
Third Space Learning Virtual Classroom
The Third Space Learning virtual classroom allows tutors and students to communicate through distinct audio and messaging layers.
Audio
Tutors and students communicate through a secure, shared audio-only channel using the Amazon Chime SDK (https://aws.amazon.com/chime/chime-sdk/), which uses WebRTC (https://en.wikipedia.org/wiki/WebRTC).
Messaging
We use Ably (https://ably.com/) for non-audio classroom communication. The messaging layer works through the *thirdspacelearning.us domain.
Rollbar
We use Rollbar (https://rollbar.com/) for error logging and reporting.
LaunchDarkly
We use LaunchDarkly (https://launchdarkly.com/) to selectively release features and platform changes to our users.
Document version history
Version | Date | Changes |
1.0 | 5 Sep 2025 | Initial version |