Lack of documentation on client computer network requirements to connect to BYO AML workspace vscode

[yogitasrivastava]

[While working on our recent engagements, customer had lot of issues launching the vscode web and desktop]. After adding all the required vscode firewall rules in their own firewall, the ml extension was getting download, vscode server installed on the compute instance and listening on port 8705. But still web socket connection was not getting established. Customers network team found out that an outbound rule has to be opened to port 8705 from customers laptop.

We want to understand if their is any documentation around the network requirements from customers laptop/workstation sitting in on-prem network to connect to the AML workspace in BYO VNet.

Also, does customer has to allow outbound fom their local laptop everytime the vscode server is launched from the compute instance since it changes its listening ip address. We observed 8707 as another ip address that was used by the vscode desktop when launched from AML workspace.

---

Document Details

⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

• ID: 2eeeb5a8-3587-0932-0d80-6a47414c82c6
• Version Independent ID: 34958145-3803-c078-c1e2-798169b329b2
• Content: Configure inbound and outbound network traffic - Azure Machine Learning
• Content Source: articles/machine-learning/how-to-access-azureml-behind-firewall.md
• Service: machine-learning
• Sub-service: enterprise-readiness
• GitHub Login: @jhirono
• Microsoft Alias: jhirono

[AjayBathini-MSFT]

@yogitasrivastava Thanks for your feedback! We will investigate and update as appropriate.

[RamanathanChinnappan-MSFT]

@jhirono could you please review this and update as appropriate.

[RamanathanChinnappan-MSFT]

@yogitasrivastava I've delegated this to @jhirono, a content author, to review and share their valuable insights.

[jhirono]

@meerakurup