For teachers and pupils to use the Third Space Learning platform and Virtual classroom, a few simple changes need to be made to your school’s firewall and / or web filtering system. This document lists the essential changes you (or your IT team) will need to make to ensure Third Space Learning sessions can run effectively in your school.
If you have any concerns about the feasibility of implementing these changes in your school then please speak to your account manager or our support team.
The required set up is different depending on whether your school uses a firewall, proxy, web filter or a combination of the three. Please see the relevant sections below
If you would like more information on why we require the following changes for Third Space Learning to function effectively, please read the Third Space Learning services section below.
Firewall
If your school uses a firewall, the following destinations and ports need to be whitelisted.
Service | Destination | Ports (Inbound & outbound) |
Third Space Learning platform | *.thirdspacelearning.com | TCP/443 |
| thirdspacelearning.com | TCP/443 |
Virtual Classroom Audio layer | chime.aws | TCP/443 |
| *.chime.aws | TCP/443 |
| 99.77.128.0/18 | TCP/443, UDP/3478 |
Error logging and reporting | *.logs.datadoghq.eu | TCP/443 |
| rum.browser-intake-datadoghq.eu | TCP/443 |
| logs.browser-intake-datadoghq.eu | TCP/443 |
| api.rollbar.com | TCP/443 |
| api.mixpanel.com | TCP/443 |
Proxy or Web filter
If your school uses a proxy or web filter that blocks HTTPS traffic on port 443 you should put the following urls on an allow list. You need to make sure:
HTTPS decryption is disabled for these URLs
It proxies WebSockets as well as HTTPS
Service | URL |
Third Space Learning Platform | *.thirdspacelearning.com |
| thirdspacelearning.com |
| s3-eu-west-1.amazonaws.com/thirdspacelearning-production |
| tsl-static.s3.eu-west-2.amazonaws.com |
Virtual Classroom Audio layer | chime.aws |
| *.chime.aws |
| 99.77.128.0/18 |
Error logging and reporting | *.logs.datadoghq.com |
| rum.browser-intake-datadoghq.eu |
| logs.browser-intake-datadoghq.eu |
| api.rollbar.com |
| api.mixpanel.com |
Third Space Learning services
Third Space Learning Platform
The TSL platform is hosted by Amazon Web Services (AWS) and uses the Simple Storage Service (S3). For the platform to function properly, you need to make the changes outlined in the table above.
Third Space Learning Virtual Classroom
The Third Space Learning virtual classroom allows tutors and pupils to communicate through distinct audio and messaging layers.
Audio
Tutors and pupils communicate through a secure, shared audio-only channel using the Amazon Chime SDK (https://aws.amazon.com/chime/chime-sdk/), which uses WebRTC (https://en.wikipedia.org/wiki/WebRTC).
Messaging
We use Ably (https://ably.com/) for non-audio classroom communication. The messaging layer works through the *thirdspacelearning.com domain.
Datadog
We use Datadog (https://www.datadoghq.com/) to monitor and improve classroom connectivity and platform performance.
Rollbar
We use Rollbar (https://rollbar.com/) for error logging and reporting.
Mixpanel
We use Mixpanel (https://mixpanel.com/) to understand how our customers use our products.
Document version history
Version | Date | Changes |
1.0 | 01/07/2021 | Initial version |
1.1 | 13/01/2022 |
|
1.2 | 13/04/2022 | Added Datadog EU |
1.3 | 11/07/2022 | Added additional Datadog addresses |
2.0 | 02/09/2022 |
|
2.1 | 30/09/2022 | Remove unused Datadog addresses |
2.2 | 01/11/2022 | Removed more unused Datadog addresses |
2.3 | 19/01/2023 | Removed further legacy audio ports |
2.4 | 24/01/2023 | Corrected Datadog logs typo |
2.5 | 20/03/2023 |
|