Transport and network requirements for inference APIs.
TLS
- Use HTTPS only against
https://51kik.comandhttps://51kik.com/v1. - Do not disable TLS verification in production.
Public internet
Default access is public HTTPS. Allow outbound 443 to the gateway hostname assigned to your tenant.
IP allow lists
When per-key IP allow lists are enabled for you in the console:
- Configure egress IPs or NAT ranges in the console.
- Calls from other IPs return 403 (e.g.
ip_not_allowed) — see Errors. - Update the list before changing egress IPs to avoid mass 403s.
Private connectivity
VPC peering, dedicated lines, or private endpoints may use a different Base URL than the public docs. Use the endpoint from your console in your app and SDK (same shape as Base URL and environments).
Proxies
| Scenario | Guidance |
|---|---|
| Corporate HTTP proxy | Set HTTPS_PROXY; do not buffer SSE |
| Multi-region | Use regional entry points when provided; align key policy |
Disable response buffering for streaming (Streaming).