none
Branchcache -- primary and branch on a separate AD Forest RRS feed

  • Question

  • I have two sites running separate active directory forest.

    In Philippines : 
    - Windows 2016 File Server as host / Shared folders are encrypted with Symantec Endpoint Encryption

    In Taiwan: 
    - Windows 10 Enterprise in VDI (can have Symantec Endpoint Encryption client)

    Scenario:

    I want to implement BranchCache on PH File Server and...
    Implement Distributed Cache Mode running on TW VDI PCs
    Questions are:

    Can BranchCache work across separate active directory forests?
    If yes, what are the network ports do I need to allow between PH and TW
    Wednesday, July 3, 2019 7:05 AM

All replies

  • hi,
    1 what's "webdav " mean?
    2 "the main branch and remote branch are on different active directory forests"
    have you config 2-way trust on both main branch and remote branch?
    3 do remote branch users only need to access the file server of main branch ?



    Best Regards
    Andy YOU
    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Thursday, July 4, 2019 3:37 PM
  • Hi Andy,

    1. I configured webdav to create a shared folder accessible via http (https://docs.microsoft.com/en-us/iis/install/installing-publishing-technologies/installing-and-configuring-webdav-on-iis)

    2. 2-way AD trust is not an option

    3. remote branch users need to access the file server of the main branch via internet (or if there are other options available).

    Friday, July 5, 2019 7:27 AM
  • Hi

    4 "2-way AD trust is not an option" so is vpn  also not an option?
     

    5 there are 2 documents for your reference.
    Deploy Remote Access in a Multi-Forest Environment

    https://docs.microsoft.com/en-us/windows-server/remote/remote-access/ras/multi-forest/deploy-remote-access-in-a-multi-forest-environment
    BranchCache
    https://docs.microsoft.com/en-us/windows-server/networking/branchcache/branchcache

    Best Regards
    Andy YOU
    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Tuesday, July 9, 2019 5:40 AM
  • Hello edmoncu,

    Please check the following link for a full guide in Microsoft Docs.

    https://docs.microsoft.com/en-us/windows-server/networking/branchcache/branchcache


    Hamid Sadeghpour Saleh Microsoft MCT Regional Lead

    hamidsadeghpour.net

    Mark it as answer if your question has solved in order to keep forums updated.

    Tuesday, July 9, 2019 6:59 AM
  • Hi

    4 "2-way AD trust is not an option" so is vpn  also not an option?
     

    5 there are 2 documents for your reference.
    Deploy Remote Access in a Multi-Forest Environment

    https://docs.microsoft.com/en-us/windows-server/remote/remote-access/ras/multi-forest/deploy-remote-access-in-a-multi-forest-environment
    BranchCache
    https://docs.microsoft.com/en-us/windows-server/networking/branchcache/branchcache


    Any form of VPN is not an option either. At the moment I have my webdav server be reverse-proxied via CloudFlare and whitelist only my Taiwan branch. I was hoping to take advantage of branchcache through that.

    I have enabled Branchcache on my Philippine server.

    Tuesday, July 9, 2019 2:55 PM
  • Hello edmoncu,

    Please check the following link for a full guide in Microsoft Docs.

    https://docs.microsoft.com/en-us/windows-server/networking/branchcache/branchcache



    Hi Hamid,

    I've been reading through it. One question I am curious though is how does the client determine if a resource has its branchcache enabled? I may have overlooked it but I see no references on the client-side saying these are branchcache-enabled content (url1, url2, smb1, etc).

    Wednesday, July 10, 2019 4:03 AM
  • HI,
    there is a document for your reference .
    Windows BranchCache deep dive
    https://blog.ahasayen.com/what-is-branchcache/

    Please Note: Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.


    Best Regards
    Andy YOU
    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Wednesday, July 17, 2019 9:47 AM