FireBrick Firewall - Steam Client: Difference between revisions

This rulefirewall set restrictslimits both inbound and outbound traffic to the Steam Client, useful for a Windows or Mac Gamingsteam Systemclient.

These staticStatic DNS entries help keepkeeps the IP addresses matchedused tothe same as the ones used in the firewall rule set:

Running Steamsteam will download a small file from http://client-download.steampowered.com/client/ containing a list of files with SHA-1 checksum and size in bytes to check if Steamsteam is up to date.

If Steamsteam is outdated, it will need to download the updated files by randomly selecting one of the CDN hosts and that host will be used to serve the files.

Since Steamsteam randomly connects to a host, it is possible that it doesn’t cycle through all four CDN hosts. Unfortunately there is no way to connect to a particular CDN host because there is no command line option to do that.

You can map all 4 hostnames to the IP address of the origin server. The origin server is where the CDN will pull the files from and serve to users. This would mean that the origin server is less busy since it is not used to serve files to millions of users but only serve once to the each CDN. The origin server has a hostname of cdn-01-origin.steampowered.com or cdn-01.steampowered.com, and the hostname will resolve to an IP address of 208.64.200.30.