关于企业代理后Microsoft认知服务及Bot Service DirectLine需开放端口的问询

Hey Wayne, great question—let's break down the ports you need to open in your enterprise proxy for each of these services clearly:

Cognitive Services (LUIS, QnA Maker, Bing Web Search) #

All three of these services use standard HTTPS encryption for all communication. That means you only need to open one port across all of them:

• 443 (the default secure HTTP port)

There are no non-standard ports required here. All traffic to their Azure-hosted endpoints will flow over port 443.

Bot Service DirectLine Channel #

DirectLine follows the same pattern, but with a small extra consideration for real-time interactions:

• 443 (standard HTTPS port for all REST API calls and initial connection setup)
• For real-time WebSocket-based conversations: WebSocket traffic over 443 (often called WSS, WebSocket Secure)

You don't need to open a separate port for WebSocket traffic—your proxy just needs to allow WebSocket connections to pass through port 443 alongside regular HTTPS traffic.

Just to recap: All the services you mentioned rely entirely on port 443. The only extra thing to verify is that your proxy allows WebSocket traffic over this port if you're using real-time features with DirectLine.

内容的提问来源于stack exchange，提问作者Wayne