Groove without Relay servers.

[Manoj]

Hi,

I have a requirement where in I want to use Groove to do Folder
synchronsation between 2 office which are behind a firewall (we have a VPN
setup). From what I understand the 2 clients will talk to each other through
a Groove Relay server. But I dont want to use an intermediate server, can I
setup groove in such a way that P2P communication happens and no relay server
has to be contacted since we have security concerns.

 

[Hugh Pyle [MSFT]]

If Groove can open a network connection (TCP port 2492) directly between the
machines, then it will prefer this over a relayed connection. This will
usually happen if the two machines are on the same network. Where a direct
network connection can't be established (for example two users behind
different firewalls), then they'll communicate via the relay.

You can't configure Groove to never use a relay. Each Groove account is
provisioned to a relay server (hosted by Microsoft, or installed in your
company), which provides these cross-network communication capabilities.

What are your security concerns? The relay does not maintain a copy of the
workspace; it only acts as a queue to deliver changes as needed. Workspace
data sent over any network is encrypted before transmission, using a key
which is only known to the workspace members -- the relay doesn't have
access to the keys, and its queues only contain encrypted data.

--
Hugh Pyle / Program Manager / Microsoft Office Groove
http://blogs.msdn.com/hughpyle/

This posting is provided "AS IS" with no warranties, and confers no rights.


in message
news:[email protected]...

 

[Gell]

Dear Manoj,

I agree with Hugh that we cannot manually to specify the relay server from
Groove client and if you want your two machines sync the data directly likes
p to p, then they must be in the same network segment, otherwise, they will
communciate their Relay server first to find the location of another side.

Meanwhile, the realy do not store a copy of client's data, it only deliever
the data from sender to receiver. Please also be assured that Workspace
data sent over any network is encrypted before transmission, using a key
which is only known to the workspace members -- the relay doesn't have
access to the keys, and its queues only contain encrypted data.

Groove Support