About Copilot subscription-based network routing
As an enterprise or organization owner, you can use your network firewall to explicitly allow access to GitHub Copilot Business or GitHub Copilot Enterprise, or both, and/or block access to GitHub Copilot Individual. This allows you to control which GitHub Copilot plans your members can use within your network.
Configuring Copilot subscription-based network routing will affect the following GitHub Copilot features:
- Code completions in Visual Studio Code, Visual Studio, JetBrains IDEs, and Vim/NeoVim
- Copilot Chat in Visual Studio Code, Visual Studio, and JetBrains IDEs
- Copilot Chat on GitHub
- GitHub Mobile Apps
- Copilot in the CLI
Copilot subscription-based network routing is enabled for all users. This ensures that users access GitHub Copilot through an endpoint that is specific to their Copilot subscription. Only Copilot Business users will be able to connect to the Copilot Business endpoint and only Copilot Enterprise users will be able to connect to the Copilot Enterprise endpoint.
Important steps to ensure continued access to GitHub Copilot
You should ensure that your firewall allows access to all of the hostnames listed in "Configuring your proxy server or firewall for Copilot."
Configuring Copilot subscription-based network routing for your enterprise or organization
Enterprise or organization owners can add the endpoints for GitHub Copilot Business or GitHub Copilot Enterprise, or both, to their allow-list. This will ensure that members can only access GitHub Copilot through the allowed endpoint.
Note
For enterprise accounts with both GitHub Copilot Business and GitHub Copilot Enterprise subscriptions, both endpoints should be added to your allow-list.
-
Ensure your members have updated to at least the minimum version of their Copilot client listed below.
- For Visual Studio Code, use Copilot Chat version 0.17 or later.
- For JetBrains IDEs, use Copilot version 1.5.6.5692 or later.
- For Visual Studio, use version VS 2022 17.11 or later.
-
Update your corporate network firewall to include one, or both, of these paths in your allowlist:
-
For a Copilot Business subscription, add
*.business.githubcopilot.com -
For a Copilot Enterprise subscription, add
*.enterprise.githubcopilot.com
Note
The
*indicates a wildcard character. A wildcard is necessary as there are multiple subdomains required for GitHub Copilot to function correctly. -
-
Update your corporate network firewall to include
*.individual.githubcopilot.comin your blocklist.