Firewall requirementsΒΆ

Firewall rules must be configured for Ubuntu Pro for WSL to operate fully.

The following figure shows the possible connections between the different components and their default ports and protocols.

Firewall considerations.

The following table lists the default ports and protocols used by Ubuntu Pro for WSL:

Description

Client System

Server System

Protocol

Default Port

Target address

Required for online installation of WSL instances[1].

Windows Host / Pro Agent

MS Store

tcp

https (443)

See Microsoft documentation for a list of addresses to allow.

Ubuntu Pro enablement[2]

Windows Host / Pro Agent

Canonical Contract Server

tcp

https (443)

contracts.canonical.com

Landscape management[2]

Windows Host / Pro Agent

Landscape Server

tcp

grpc (6554)

On-premise Landscape address

WSL instance management on the Windows host. Firewall rules set up at installation time of the WSL Pro agent.

WSL Instance / wsl-pro-service

Windows Host / Pro Agent

tcp

grpc (dynamic:49152-65535)

Hyper-V Virtual Ethernet Adapter IP

Ubuntu Pro[2][3].

WSL Instance / Ubuntu Pro client

Canonical Contract Server

tcp

https (443)

contracts.canonical.com

Landscape[2].

WSL Instance / Ubuntu Pro client

Landscape Server

tcp

https (443)

On-premise Landscape address

If the client system is behind a proxy, ensure that the proxy is configured to allow the required connections.