This article is for network administrators.
For users on your network to access Google Drive and Google Docs editors, connect your firewall rules to the following hosts and ports. Otherwise, users might be blocked or denied access from these services.
For the following hosts, [N] means any single decimal digit and * means any string not containing a period.
- talk.google.com:5222/XMPP (needed only for Backup and Sync)
About IP addresses and proxies
Techniques that Drive uses to connect to Google servers depend on the browser, browser version, networking conditions, and so on.
- The IP addresses that some domain names resolve to don't necessarily fall within any given address range.
- Other Google properties might use the IP addresses that Drive uses.
- Even if you don't see activity at the addresses listed above, there could be future activity.
- Drive sync applications support all unauthenticated proxies configured by the operating system.
- Backup and Sync supports only DNS-based distribution of Proxy Auto-Configuration (PAC) files. PAC distribution over Dynamic Host Configuration Protocol (DHCP) is not supported.
Google Drive for desktop proxies
Drive for desktop encrypts all network traffic and validates host certificates to protect against man-in-the-middle (MITM) attacks. If you deploy to a network that uses a decrypting proxy, you should configure the TrustedRootCertsFile setting for Drive for desktop.
Drive for desktop supports both Domain Name System (DNS) and DHCP proxy discovery on Microsoft Windows and DNS proxy discovery on Apple OSX.
Google, Google Workspace, and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.