Skip to main content
Set up your school web filtering for Third Space Learning

This article explains the essential changes you will need to make for Third Space Learning to work in your school.

Sam Cumming avatar
Written by Sam Cumming
Updated over a year ago

For teachers and pupils to use the Third Space Learning platform and Virtual classroom, a few simple changes need to be made to your school’s firewall and / or web filtering system. This document lists the essential changes you (or your IT team) will need to make to ensure Third Space Learning sessions can run effectively in your school.

If you have any concerns about the feasibility of implementing these changes in your school then please speak to your account manager or our support team.

The required set up is different depending on whether your school uses a firewall, proxy, web filter or a combination of the three. Please see the relevant sections below

If you would like more information on why we require the following changes for Third Space Learning to function effectively, please read the Third Space Learning services section below.


Firewall

If your school uses a firewall, the following destinations and ports need to be whitelisted.

Service

Destination

Ports (Inbound & outbound)

Third Space Learning platform

*.thirdspacelearning.com

TCP/443

thirdspacelearning.com

TCP/443

Virtual Classroom Audio layer

chime.aws

TCP/443

*.chime.aws

TCP/443

99.77.128.0/18

TCP/443, UDP/3478

Error logging and reporting

*.logs.datadoghq.eu

TCP/443

rum.browser-intake-datadoghq.eu

TCP/443

logs.browser-intake-datadoghq.eu

TCP/443

api.rollbar.com

TCP/443

api.mixpanel.com

TCP/443


Proxy or Web filter

If your school uses a proxy or web filter that blocks HTTPS traffic on port 443 you should put the following urls on an allow list. You need to make sure:

  • HTTPS decryption is disabled for these URLs

  • It proxies WebSockets as well as HTTPS

Service

URL

Third Space Learning Platform

*.thirdspacelearning.com

thirdspacelearning.com

s3-eu-west-1.amazonaws.com/thirdspacelearning-production

tsl-static.s3.eu-west-2.amazonaws.com

Virtual Classroom Audio layer

chime.aws

*.chime.aws

99.77.128.0/18

Error logging and reporting

*.logs.datadoghq.com

rum.browser-intake-datadoghq.eu

logs.browser-intake-datadoghq.eu

api.rollbar.com

api.mixpanel.com


Third Space Learning services

Third Space Learning Platform

The TSL platform is hosted by Amazon Web Services (AWS) and uses the Simple Storage Service (S3). For the platform to function properly, you need to make the changes outlined in the table above.

Third Space Learning Virtual Classroom

The Third Space Learning virtual classroom allows tutors and pupils to communicate through distinct audio and messaging layers.

Audio

Tutors and pupils communicate through a secure, shared audio-only channel using the Amazon Chime SDK (https://aws.amazon.com/chime/chime-sdk/), which uses WebRTC (https://en.wikipedia.org/wiki/WebRTC).

Messaging

We use Ably (https://ably.com/) for non-audio classroom communication. The messaging layer works through the *thirdspacelearning.com domain.

Datadog

We use Datadog (https://www.datadoghq.com/) to monitor and improve classroom connectivity and platform performance.

Rollbar

We use Rollbar (https://rollbar.com/) for error logging and reporting.

Mixpanel

We use Mixpanel (https://mixpanel.com/) to understand how our customers use our products.


Document version history

Version

Date

Changes

1.0

01/07/2021

Initial version

1.1

13/01/2022

  • Removed Callstats

  • Clarified Legacy Audio requirements

  • Updated links

  • Added test my set up link

1.2

13/04/2022

Added Datadog EU

1.3

11/07/2022

Added additional Datadog addresses

2.0

02/09/2022

  • Simplified sites + ports tables

  • Added Ably

  • Removed PubNub

  • Removed legacy audio

2.1

30/09/2022

Remove unused Datadog addresses

2.2

01/11/2022

Removed more unused Datadog addresses

2.3

19/01/2023

Removed further legacy audio ports

2.4

24/01/2023

Corrected Datadog logs typo

2.5

20/03/2023

  • Removed ports column for proxy & web filter section

  • Specified inbound & outbound port requirement

Did this answer your question?