Reflective NLM is a web application used by your school's students and
teachers. For it to function correctly, the network must allow HTTPS (port 443)
outbound traffic to the domains listed below. All connections are encrypted and
outbound-only.
Core Application
- *.reflectivelearning.co.zaAll subdomains — HTTPS
- reflective-learning-prod.web.appFirebase Hosting — HTTPS
- reflective-learning-prod.firebaseapp.comFirebase Hosting — HTTPS
- reflective-learning-mc-2.web.appFirebase Hosting — HTTPS
- reflective-learning-mc-2.firebaseapp.comFirebase Hosting — HTTPS
- reflective-learning-dashboard.firebaseapp.comMission Control sign-in — HTTPS
Regional API Endpoints
The app looks up which regional cluster an account belongs to when the user signs in,
then uses that region for the rest of the session. Both regions must be
allowed. A learner's region follows their account rather than the location of
the school, so an Australia-hosted account signing in from a South African school still
needs the Australian endpoint reachable.
- directory.reflectivelearning.co.zaRegion lookup at sign-in — HTTPS
- api-eu.reflectivelearning.co.zaMain API, Europe — HTTPS
- api-au.reflectivelearning.co.zaMain API, Australia — HTTPS
- dashboard-api-eu.reflectivelearning.co.zaDashboard API, Europe — HTTPS
- dashboard-api-au.reflectivelearning.co.zaDashboard API, Australia — HTTPS
Firebase & Google Services (Authentication, Storage, APIs)
- identitytoolkit.googleapis.comFirebase Auth — HTTPS
- securetoken.googleapis.comFirebase Auth tokens — HTTPS
- accounts.google.comGoogle Account Sign-In — HTTPS
- firebase.googleapis.comFirebase SDK — HTTPS
- firebasestorage.googleapis.comFirebase Storage — HTTPS
- storage.googleapis.comGoogle Cloud Storage — HTTPS
- reflective-learning-prod.firebaseio.comRealtime Database — HTTPS
- *.appspot.comApp Engine APIs — HTTPS
Supporting Services
- reflective-learning-features.ew.r.appspot.comFeature flags — HTTPS
- reflective-learning-prod-mess.nw.r.appspot.comMessaging API — HTTPS
- reflective-learning-lti.lm.r.appspot.comLTI launches, some schools — HTTPS
CDN & Fonts
- assets.swarmcdn.comVideo streaming CDN — HTTPS
- fonts.googleapis.comGoogle Fonts — HTTPS
- fonts.gstatic.comGoogle Fonts files — HTTPS
- fonts.cdnfonts.comAdditional fonts — HTTPS
Lingo Vocabulary App
- learn.lingo.schoolLingo app — HTTPS
Note: If your firewall uses SSL inspection (HTTPS deep packet inspection),
you may need to add these domains to the SSL inspection bypass list as well.
Reflective NLM uses TLS 1.2+ and certificate pinning may interfere with inspection.