Hello, sorry if I post this at the wrong place & let me know the proper location.

We have an environment with limited internet data quota & speed in remote/rural area. Let's say, we can manage to have 1 GB per month over cellular network. We plan to share this limited internet, only for www.googleapis.com to allow firebase auth and some firebase cloud messaging to many users.

The problem we have is that by allowing www.googleapis.com via dnsmasq+ipset+firewall , we also allow Google Drive Downloads. For example, the files.get api allows downloading user-content via www.googleapis.com .

Based on our testing using Google Drive app on Android, although video files are blocked properly, 1.6 GB rar files will pass through the firewall along with pdf & png files.

We expect that user contents are hosted at googleusercontent.com with different IPs so that firewall works properly.

Suggestion:
Maybe www.googleapis.com endpoint can do HTTP redirect to download user-contents from different domain & IP ?

This post has been reposted at Google's Public Issue Tracker.