Connection timeout to *.googleapis.com

[katzyonatan]

Hi,

I have an application that is tightly coupled with google cloud services, like the storage service.

unfortunatelly, we get connection timeouts when connecting to google. we have rules that enable storage.googleapis.com over https, along with few other services.

so, I have two questions:

1. How can I troubleshot the problem? I have no idea why the connection gets timeout; I suspect maybe it is related to the connection to the CA, or maybe to the DNS. maybe there is another connection I am not aware about....

2. how can I enable all subdomains in a rule? can I allow *.googleapis.com?

[emnoc]

1: do a diag sniffer and look traffic to google or from the host(s)

2: Enable a generic rule "ANY" and again for that host and monitor it connections and service ports

3: Disable  SSL inspection for google and again monitor traffic