Hardware FixRecommendedDevice not working? Your driver may be the problemCheck updates for common hardware issues.Fix DriversOctober DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsClean PCRecommendedOne scan can reveal what keeps slowing WindowsLook for cleanup and repair opportunities.Run Scan×
Skip to content
World desk6 min

SharePoint Over the WAN: How to Build a Global Service

A practical guide to global SharePoint architecture: measure real WAN performance, choose central or regional hosting, optimize Microsoft 365 routes, and configure hybrid access deliberately.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

For most organizations, the best starting point is one centrally hosted SharePoint environment—either a central SharePoint Server farm or a central Microsoft 365 service—provided users have reliable connectivity to it. Add regional or in-country farms when measurements, data-residency rules, or local requirements justify the extra complexity. Do not stretch a farm across a WAN unless it meets Microsoft’s stringent SQL-to-front-end latency and bandwidth limits.

Choose an architecture from measured user experience

A global SharePoint design is a balance between user-perceived performance, connectivity, data locality, resilience, security, and the work required to operate multiple environments. Geography alone does not tell you whether a central or regional design will work. Measure representative user actions over the actual WAN links before committing to a topology.

As an Amazon Associate I earn from qualifying purchases.

Microsoft’s Global architectures for SharePoint Server guidance, updated in 2023, recommends systematic benchmark testing across multiple WAN connections or user testing against a test environment. Run the tests from each major geography and include the tasks users perform, not just a network ping.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Build a representative baseline

  • Inventory users and locations, collaboration patterns, peak activity, data-residency obligations, and the locations that must keep working during a network failure.
  • Measure sign-in, page load, document open and save, search, upload and download, and sharing from representative user locations.
  • Record page-render time, search latency, document operation time, error rates, WAN packet loss, DNS resolution time, and cache behavior.
  • Repeat tests during realistic busy periods and over the links users will actually use, including VPN or proxy paths if those are part of the design.

Set user-facing acceptance thresholds from the baseline and business requirements. Microsoft’s guidance does not prescribe universal page-load or search-latency targets; a threshold that works for one organization may not suit another.

#1 Best Overall
TP-Link AC1200 Gigabit Dual Band WiFi Router (Archer A6) | MU-MIMO Wireless Internet Router, 4 x Antennas, OneMesh and AP Mode, Long Range Coverage
  • Dual band router upgrades to 1200 Mbps high speed internet (300mbps for 2.4GHz plus 900Mbps for 5GHz), reducing buffering and ideal for 4K stream
  • Full Gigabit Ports - Gigabit Router with 4 Gigabit LAN ports, ideal for any internet plan and allow you to directly connect your wired devices
  • Boosted Coverage - Four external antennas equipped with Beamforming technology extend and concentrate the Wi-Fi signals
  • MU-MIMO technology - (5GHz band) allows high speeds for multiple devices simultaneously
  • Access Point Mode - Supports AP Mode to transform your wired connection into wireless network, an ideal wireless router for home

Compare central, regional, stretched, and hybrid designs

Use a central environment as the first option when locations are well connected. Microsoft describes a central architecture as the first and best option for most worldwide user bases. A regional design may be warranted for poorly connected locations, local data or user needs, or political boundaries that require an in-country environment. A hybrid design combines Microsoft 365 with on-premises services; it is not automatically a way to make every remote action faster.

Pattern When it fits Main trade-off
Central environment Locations have reliable links and measurements show acceptable results for common tasks. Simpler to operate than several farms, but users and services depend on WAN connectivity to the central location.
Regional or in-country farms A location is poorly connected, local data or users need locality, or political boundaries require an in-country farm. Can improve locality or isolate some failures, but adds operational complexity and service dependencies to design.
Stretched farm Only where the SQL Server-to-front-end web-server link meets the strict latency and bandwidth requirements. A narrow technical fit; it is not a general solution for connecting distant regions.
Hybrid SharePoint Microsoft 365 needs to access specified on-premises resources through a supported inbound topology. Requires deliberate reverse-proxy, DNS, URL, and authentication configuration; inbound connectivity does not remove WAN dependencies.

Score the viable options against WAN reliability and latency, data residency, service-application dependencies, search freshness and query locality, failure isolation, security exposure, operational complexity, infrastructure and licensing costs, and measured user experience. Do not assume an older farm count or a regional layout is still appropriate without retesting the current environment.

Why a stretched farm is a special case

Microsoft states that a stretched farm requires less than 1 millisecond of one-way latency between the computer running SQL Server and the front-end web servers, and at least 1 gigabit per second of bandwidth. Those are design gates for that connection, not averages to achieve across unrelated links. If the link does not satisfy both conditions, select a different architecture rather than treating a typical long-distance WAN as suitable for a stretched farm.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #2
Sale
TP-Link ER605, Wired Gigabit VPN Router | Up to 3 WAN Ethernet Ports + 1 USB WAN, SPI Firewall SMB Router, Omada SDN Integrated, Load Balance, Lightning Protection
  • 【Five Gigabit Ports】1 Gigabit WAN Port plus 2 Gigabit WAN/LAN Ports plus 2 Gigabit LAN Port. Up to 3 WAN ports optimize bandwidth usage through one device.
  • 【One USB WAN Port】Mobile broadband via 4G/3G modem is supported for WAN backup by connecting to the USB port. For complete list of compatible 4G/3G modems, please visit TP-Link website.
  • 【Abundant Security Features】Advanced firewall policies, DoS defense, IP/MAC/URL filtering, speed test and more security functions protect your network and data.
  • 【Highly Secure VPN】Supports up to 20× LAN-to-LAN IPsec, 16× OpenVPN, 16× L2TP, and 16× PPTP VPN connections.
  • Security - SPI Firewall, VPN Pass through, FTP/H.323/PPTP/SIP/IPsec ALG, DoS Defence, Ping of Death and Local Management. Standards and Protocols IEEE 802.3, 802.3u, 802.3ab, IEEE 802.3x, IEEE 802.1q

Decide where SharePoint services and search belong

Do not treat every service application as if it had the same network behavior. Decide which services are central, shared across farms, replicated, or local, then document what users and administrators experience when a WAN link is unavailable.

Plan search across locations

SharePoint search can crawl content across WAN connections or retrieve results from remote result sources, and a search farm can be located in a separate datacenter. Choose a layout based on where content resides, how quickly results need to reflect changes, and how users reach the search service. Test both crawling and query behavior from the relevant locations.

Document shared-service failure behavior

Other service applications may be shared across WAN links, but the design depends on the service and link availability. For example, an intermittent link can make a service such as Managed Metadata unavailable while the link is down. Record each cross-location dependency, its failure mode, and the recovery behavior instead of assuming that a shared service remains available during an outage.

Rank #3
Sale
TP-Link AC1200 WiFi Router Dual Band Wireless Internet Router (Archer A54) | 4 x 10/100 Mbps Fast Ethernet Ports, EasyMesh Compatible, Support Guest WiFi, Access Point Mode, IPv6 & Parental Controls
  • Dual-band Wi-Fi with 5 GHz speeds up to 867 Mbps and 2.4 GHz speeds up to 300 Mbps, delivering 1200 Mbps of total bandwidth¹. Dual-band routers do not support 6 GHz. Performance varies by conditions, distance to devices, and obstacles such as walls.
  • Covers up to 1,000 sq. ft. with four external antennas for stable wireless connections and optimal coverage.
  • Supports IGMP Proxy/Snooping, Bridge and Tag VLAN to optimize IPTV streaming
  • Access Point Mode - Supports AP Mode to transform your wired connection into wireless network, an ideal wireless router for home
  • Advanced Security with WPA3 - The latest Wi-Fi security protocol, WPA3, brings new capabilities to improve cybersecurity in personal networks

Keep Microsoft 365 traffic on a direct, local path

For users accessing SharePoint in Microsoft 365, the goal is to minimize round-trip time to the Microsoft Global Network. Use local internet egress and local DNS so a user reaches a nearby Microsoft 365 entry point. A central-office backhaul, VPN, proxy, cloud security service, or inspection path can create a geographic hairpin and add avoidable delay.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  1. Map the actual route. Identify where DNS resolution occurs, where Microsoft 365 traffic exits the network, and which VPN, proxy, inspection, or security layers handle it.
  2. Identify Microsoft 365 traffic separately. Microsoft publishes an endpoints web service administrators can use to identify Microsoft 365 traffic and apply appropriate network treatment.
  3. Remove unnecessary hairpins. Where security policy permits, avoid sending remote users’ Microsoft 365 traffic through a distant office or unnecessary intermediary before it reaches Microsoft.
  4. Retest by geography. Compare the common SharePoint actions from each major location after network changes, not just the route or a generic connectivity check.

Local egress is a network-path design choice, not a guarantee that every SharePoint operation will be fast. User experience also depends on page weight, endpoint and browser behavior, service dependencies, and the reliability of the local connection.

Reduce the work and data sent to remote users

Network distance cannot always be changed. Lightweight pages and suitable caching can reduce the amount of work or data that must cross the WAN.

Rank #4
Sale
TP-Link AX1800 WiFi 6 Router (Archer AX21 V5) | Dual Band Wireless Internet, Gigabit, Easy Mesh, Works with Alexa - A Certified for Humans Device
  • DUAL-BAND WIFI 6 ROUTER: Wi-Fi 6(802.11ax) technology achieves faster speeds, greater capacity and reduced network congestion compared to the previous gen. All WiFi routers require a separate modem. Dual-Band WiFi routers do not support the 6 GHz band.
  • AX1800: Enjoy smoother and more stable streaming, gaming, downloading with 1.8 Gbps total bandwidth (up to 1200 Mbps on 5 GHz and up to 574 Mbps on 2.4 GHz). Performance varies by conditions, distance to devices, and obstacles such as walls.
  • CONNECT MORE DEVICES: Wi-Fi 6 technology communicates more data to more devices simultaneously using revolutionary OFDMA technology
  • EXTENSIVE COVERAGE: Achieve the strong, reliable WiFi coverage with Archer AX1800 as it focuses signal strength to your devices far away using Beamforming technology, 4 high-gain antennas and an advanced front-end module (FEM) chipset
  • OUR CYBERSECURITY COMMITMENT: TP-Link is a signatory of the U.S. Cybersecurity and Infrastructure Security Agency’s (CISA) Secure-by-Design pledge. This device is designed, built, and maintained, with advanced security as a core requirement.

Keep pages and customizations lightweight

Optimize pages and customizations rather than assuming the WAN alone explains slow rendering. Modern SharePoint shifts some rendering and data work to the client, so pilot the actual mix of browsers and endpoints before a broad rollout. A design that performs well on one device or browser may not represent the experience of every user group.

Use BranchCache where it fits

BranchCache can cache large SharePoint downloads at branch offices in supported Windows environments. It is relevant when users repeatedly download large content over a constrained branch link; it is not a replacement for a sound network path or a fix for every interactive page or search delay. Validate that the Windows environment and the relevant download scenario are supported, then measure cache behavior in the branch.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Use Microsoft 365 CDN for static assets

Microsoft 365 CDN can cache static assets closer to users. Microsoft’s SharePoint performance guidance, published in 2022, says the CDN is included as part of a SharePoint subscription. Public origins must contain only non-sensitive, generic assets. Private origins use permission-aware tokens for SharePoint content. Choose the origin type based on the content’s sensitivity and access requirements; do not place restricted material in a public origin.

Best Value
Sale
TP-Link Dual-Band AX3000 Wi-Fi 6 Wireless Gigabit Internet Router for Home | EasyMesh, VPN Clients & Server, HomeShield, OFDMA, MU-MIMO, USB 3.0, Secure by Design - Archer AX55
  • Next-Gen Gigabit Wi-Fi 6 Speeds: 2402 Mbps on 5 GHz and 574 Mbps on 2.4 GHz bands ensure smoother streaming and faster downloads; support VPN server and VPN client¹
  • A More Responsive Experience: Enjoy smooth gaming, video streaming, and live feeds simultaneously. OFDMA makes your Wi-Fi stronger by allowing multiple clients to share one band at the same time, cutting latency and jitter.²
  • Expanded Wi-Fi Coverage: 4 high-gain external antennas and Beamforming technology combine to extend strong, reliable, Wi-Fi throughout your home.
  • Improved Battery Life: Target Wake Time helps your devices to communicate efficiently while consuming less power.
  • Improved Cooling Design: No heat ups, no throttles. A larger heat sink and redefined case design cools the WiFi 6 system and enables your network to stay at top speeds in more versatile environments.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Configure inbound hybrid access as a supported topology

Hybrid inbound connectivity needs more than a reachable server. In the supported topology described by Microsoft’s hybrid connectivity guidance, SharePoint in Microsoft 365 sends requests to a reverse proxy, which relays them to one primary on-premises web application. Multiple hybrid solutions typically share that primary application.

Prepare the network and URL configuration

  • Provide a secure channel between Microsoft 365 and the on-premises environment.
  • Publish the reverse-proxy endpoint in public DNS and create the required intranet DNS records.
  • Configure the primary on-premises web application and site collection required by the hybrid solution.
  • Make the public URL match the external URL for the supported topology.
  • Configure the required authentication for the intended server-to-server or app-authentication scenario; NTLM is required for the specified scenarios in Microsoft’s guidance.

Host-named site collections can avoid Alternate Access Mappings (AAM) in the described topology. Path-based site collections may require AAM when public and external URLs differ. Confirm the URL and authentication requirements for the specific hybrid scenario rather than generalizing them to every SharePoint deployment.

Keep the deployment auditable

Maintain a secured deployment worksheet and build log. Record URLs, hostnames, certificates, configuration, command output, and errors so that the deployed configuration can be reviewed and problems can be traced without relying on undocumented changes.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Validate the design after launch

Repeat the representative user tests from each geography after deployment and after material network changes. Compare results with the pre-deployment baseline and investigate regressions by layer: DNS resolution, WAN loss and latency, proxy or VPN routing, page payload, service dependencies, and cache behavior. The exact thresholds belong to your organization’s baseline and user requirements, not to a universal SharePoint number.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
Crashes, No Sound, or Screen Glitches?Free driver scan
PC Slower Than It Used to Be?Free scan - under a minute

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.