​
Egress

Devin requires a hybrid architecture, which means Devin needs to access its brain. Ingress is not required.

​
Destination - Devin Domains

SubdomainFull DomainProtocolPort
frp-server-0frp-server-0.devin.aiTLS443
staticstatic.devin.aiHTTPS443
apiapi.devin.aiHTTPS443

​
Destination - External Providers

ToolDownload Source URLProtocolPort
Dockerhttps://get.docker.comHTTPS443
AWS CLIhttps://awscli.amazonaws.com/awscli-exe-linux-x86_64.zipHTTPS443
Azure CLIcurl -sL https://aka.ms/InstallAzureCLIDeb | sudo bashHTTPS443
Note: We recommend allowing traffic by FQDN and not IP Address or range. IP address allowlists make your service dependent on an external factor, like an external IP address, that you do not control. The VPC will require Intranet access to the following:
ToolFull DomainProtocolPort
SAST Toolsast.company.internalHTTPS443
GitHub/GitLabgit.company.internalHTTPS443
Artifactoryartifactory.company.internalHTTPS443

​
Internal DNS Resolution

The instance will need to be able to connect to your internal DNS resolver in order to access intranet resources.