Chrome OS Update IP or URL

[Mike]

Our web filter is blocking our Chromebooks from updating. Google Support just gives me a giant list of URLs to whitelist, which I don't want to do. I just want the URLs Chrome uses to check for updates.

[Bartosz Fabianowski]

The list of URLs to whitelist is required for Chrome OS to work as
intented. The URLs are used for login flows, policy fetches, update
checks, app/extension installs, etc.

>
> --
> --
> Chromium OS discuss mailing list: chromium-...@chromium.org
> View archives, change email options, or unsubscribe:
> http://groups.google.com/a/chromium.org/group/chromium-os-discuss?hl=en
>

[Mike]

We figured it out doing a scan of the Chromebook's IP. We had  *.google.com whitelisted already but for some reason dl.google.com would still be blocked. It seems it uses dl.google.com for updates.

[Mike Frysinger]

as Bartosz said, there are a number of sites that CrOS relies on.  there's an official URL list, but if you try to only whitelist a subset of that, correct behavior cannot be guaranteed nor supported.

if you have a specific concern, please voice it to your support contact.

-mike

--

[Mike]

We only want updating to work and authentication to work, but nothing else...Which is why we only want the URLS required for updating. If apps, drive gmail or whatever doesn't work that is fine because they work after our users authenticate to our content filter. Since logging into the web filter is an extra step that takes 15-30 seconds we wanted the URLs to avoid doing this when updating thousands of devices.

On Friday, February 26, 2016 at 1:23:37 PM UTC-5, Mike wrote:

[Josh Niesler]

According to my Chrome Data Saver extension, updates download from https://clients2.googleusercontent.com :)

[John]

Can you please point me to this whitelist?  We have a very few customers that often have issues.  It dawns on me that they may be locking down too much. 

IT would be a great resource.

[Matt Cook]

List is posted here: https://github.com/google/gfw-deployments/blob/master/apps/utils/GoogleAppsWildcardedDomains.txt

As documented on page 20 here: http://static.googleusercontent.com/media/www.google.com/en//support/enterprise/static/gapps/docs/admin/en/nftf/networking_guide/gapps_networking_guide.pdf

[John]

Thanks!