Server and firewall settings


Note: This article's really technical. We wrote it with network administrators in mind.

Google Drive and Google Sites are designed to work on uninhibited networks. But for domain and network administrators with specific firewalls or servers, the following must be accessible for Google Drive and Sites to function properly:

For the following, [N] means any single decimal digit. * means any string not containing a period.

Drive, Docs, Slides, and Drawings

  • http (port 80) connection to docs.google.com, docs[N].google.com and *.docs.google.com.
  • https (port 443) connection to docs.google.com and docs[N].google.com. The certificate protecting this connection has *.google.com as its subject.
  • https (port 443) connection to *.docs.google.com. The certificate protecting this connection has *.mail.google.com as its subject, but has *.docs.google.com as a subject alternative name.

Sheets

  • http (port 80) connection to spreadsheet.google.com, spreadsheets.google.com, spreadsheets[N].google.com, and *.spreadsheets.google.com.
  • https (port 443) connection to spreadsheet.google.com, spreadsheets.google.com and spreadsheets[N].google.com. The certificate protecting these connections has *.google.com as its subject.

Sites

  • http (port 80) connection to sites.google.com.
  • https (port 443) connection to sites.google.com. The certificate protecting this connection has *.google.com as its subject.
  • https (port 443) connection to *.sites.google.com. The certificate protecting this connection has *.mail.google.com as its subject, but has *.sites.google.com as a subject alternative name.
  • https (port 443) connection to *.googlegroups.com. The certificate protecting this connection has *.googlegroups.com as its subject.

Drive, Docs, Sheets, and Slides

  • https (port 443) connection to ssl.gstatic.com. The certificate protecting this connection has ssl.gstatic.com as its subject.
  • https (port 443) connection to www.google.com. The certificate protecting this connection has *.google.com as its subject.
  • https (port 443) connection to *.googleusercontent.com. The certificate protecting this connection has *.googleusercontent.com as its subject.
  • https (port 443) connection to gg.google.com. The certificate protecting this connection has *.google.com as its subject.
  • https (port 443) connection to *.googleapis.com. The certificate protecting this connection has *.googleapis.com as its subject.

The IP addresses that the various domain names resolve to cannot be assumed to fall inside any given address range. IP addresses used by Google Drive may be used by other Google properties. The techniques that Google Drive uses to connect to Google servers depend on the browser, browser version, and networking conditions, among other things. Even if activity to some of the addresses above is not observed in a particular Google product, that doesn’t mean it never will be.