Drive and Sites firewall and proxy settings

This article is for network administrators.

For users on your network to access Google Drive, Google Docs editors, and new Google Sites, connect your firewall rules to the following hosts and ports. Otherwise, users might be blocked or denied access from these services.

For the following hosts, [N] means any single decimal digit and * means any string not containing a period.

  • www.google.com:443/HTTPS
  • accounts.google.com:443/HTTPS
  • googledrive.com:443/HTTPS
  • drive.google.com:443/HTTPS
  • *.drive.google.com:443/HTTPS
  • docs.google.com:443/HTTPS
  • *.docs.google.com:443/HTTPS
  • *.c.docs.google.com:443/HTTPS
  • sheets.google.com:443/HTTPS
  • slides.google.com:443/HTTPS
  • talk.google.com:5222/XMPP (needed only for Backup and Sync)
  • takeout.google.com:443/HTTPS
  • gg.google.com:443/HTTPS
  • script.google.com:443/HTTPS
  • ssl.google-analytics.com:443/HTTPS
  • video.google.com:443/HTTPS
  • s.ytimg.com:443/HTTPS
  • apis.google.com:443/HTTPS
  • *.clients[N].google.com:443/HTTPS
  • *.googleapis.com:443/HTTPS
  • *.googleusercontent.com:443/HTTPS
  • *.gstatic.com:443/HTTPS
  • *.gvt1.com:443/HTTPS
  • lh[N].google.com:443/HTTPS
  • [N].client-channel.google.com:443/HTTPS
  • clients[N].google.com:443/HTTPS
  • inputtools.google.com:443/HTTPS
  • sites.google.com:443/HTTPS
  • sites.google.com:80/HTTP
  • sites.google.com:443/HTTPS
  • *.sites.google.com:443/HTTPS
  • *.googlegroups.com:443/HTTPS
  • ipv4.google.com:443/HTTPS
  • ipv4.google.com:80/HTTP

About IP addresses and proxies

Techniques that Drive and Sites use to connect to Google servers depend on the browser, browser version, networking conditions, and so on.

IPs

  • The IP addresses that some domain names resolve to don't necessarily fall within any given address range.
  • Other Google properties might use the IP addresses that Drive and Sites use.
  • Even if you don't see activity at the addresses listed above, there could be future activity.

Proxies

  • Drive sync applications support all unauthenticated proxies configured by the operating system.
  • Backup and Sync supports only DNS-based distribution of Proxy Auto-Configuration (PAC) files. PAC distribution over Dynamic Host Configuration Protocol (DHCP) is not supported.

Google Drive for desktop proxies

Drive for desktop encrypts all network traffic and validates host certificates to protect against man-in-the-middle (MITM) attacks. If you deploy to a network that uses a decrypting proxy, you should configure the TrustedRootCertsFile setting for Drive for desktop.

Drive for desktop supports both Domain Name System (DNS) and DHCP proxy discovery on Microsoft Windows and DNS proxy discovery on Apple OSX.

Related topics


Google, Google Workspace, and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.

 

Was this helpful?
How can we improve it?

Need more help?

Sign in for additional support options to quickly solve your issue

Search
Clear search
Close search
Google apps
Main menu
Search Help Center
true
73010
false