Is there a way to setup an update cache server that can deliver to any device in a big network ANY microsoft products, including xbox, windows 10 and 365 products?

Question

I have a big network with lots of different households connected, and would like to cache all the updates that come through the internet so we don't have to use the bandwidth 5 times for the same update.
That includes Xbox and any microsoft products, it also needs to be transparent for the user since I wont have access to their devices.

Answer 1

Hi Erandipiti-67711

No as these products are not designed to receive update from another source, unlike a Windows OS with WSUS or BranchCache in example.

Let me explain the basic security restrain that block you or such try; In the SSL handshake the device use to make to connect to an upstream server to update, it validate it's certificate to be sure it's a secure update server. It's done as it's a common strategy virus/malware used to do in the past to try to redirect the update source.

Redirecting the connection to a reverse proxy but on your side, will make the device connect to you, but the certificate would not be the one from the original source, as you dont have the original private key and can't use the same certificate key pair, thus it break the chain in your case.

Thanks

Philippe

Answer 2

You can use the LanCache applications. Although created for LAN parties and game launchers in mind they also cache Windows Updates.
So when the first client loaded the data the second one should be served by the local server instead: https://lancache.net/docs/containers/monolithic/

However, I didn't try it myself yet.

Answer 3

Maybe WSUS with BranchCache?
Does anyone have experience with it?

Regards
Christian