성태의 닷넷 이야기
홈 주인
모아 놓은 자료
프로그래밍
질문/답변
사용자 관리
사용자
메뉴
아티클
외부 아티클
유용한 코드
온라인 기능
MathJax 입력기
최근 덧글
[정성태] Roll A Lisp In C - Reading ; https...
[정성태] Java - How to use the Foreign Funct...
[정성태] 제가 큰 실수를 했군요. ^^; Delegate를 통한 Bein...
[정성태] Working with Rust Libraries from C#...
[정성태] Detecting blocking calls using asyn...
[정성태] 아쉽게도, 커뮤니티는 아니고 개인 블로그입니다. ^^
[정성태] 질문이 잘 이해가 안 됩니다. 우선, 해당 소스코드에서 ILis...
[양승조
] var대신 dinamic으로 선언해서 해결은 했습니다. 맞는 해...
[양승조
] 또 막혔습니다. ㅠㅠ var list = props[i].Ge...
[양승조
] 아. 감사합니다. 어제는 안됐던것 같은데....정신을 차려야겠네...
글쓰기
제목
이름
암호
전자우편
HTML
홈페이지
유형
닷넷
.NET 3.0
.NET 3.5
.NET 4.0
VC++
개발 환경 구성
제품 소개
VS.NET IDE
Vista
Windows 7
Windows 8
Windows 서버
Team Foundation Server
IIS
디버깅 기술
Win32
64비트
오피스
웹
기타
Phone
부모글 보이기/감추기
내용
How Team Foundation Server Proxy 2008 works<br /> ; <a href="http://blogs.msdn.com/tsyang/archive/2008/03/24/how-team-foundation-server-proxy-2008-works.aspx">http://blogs.msdn.com/tsyang/archive/2008/03/24/how-team-foundation-server-proxy-2008-works.aspx</a> <br /> <br /> TFS 에 대해서 잘 아시는 분들조차도,,, TFS Proxy 서버가, 인트라넷에 설치된 TFS Application Tier를 인터넷에 노출시킬 수 있는 기능을 가진 것으로 오해하는 경우가 종종 있습니다.<br /> <br /> 하지만, 직접 설치해 보면 아시겠지만... TFS Application Tier 역시 인터넷에 반드시 연결되어 있어야 한다는 것을 알 수 있습니다. 위에 소개한 토픽을 읽어보시면 실제로 TFS App Tier 에 질의가 되는 과정을 확인할 수 있습니다.<br /> <br /> [위의 내용이 간단해서, 아예 아래에 실어봅니다.] <hr /> <div style=padding:10px><DIV class=title>Ever wondering how TFS Proxy works? While this MSDN article "Team Foundation Server Proxy and Source Control" ( <A href="http://msdn2.microsoft.com/en-us/library/ms252490.aspx">http://msdn2.microsoft.com/en-us/library/ms252490.aspx</A> ) provides a great overview, this blog post will add an end-to-end story for TFS users who likes to dig into technical details.</DIV> <DIV class=title> </DIV> <DIV class=title>Let's see what happens among a user (CLIENT), TFServer (SERVER) and TFS Proxy (PROXY) when the user is trying to downloading a file from TFServer.</DIV> <OL> <LI>CLIENT authenticates with SERVER.</LI> <OL> <LI>SERVER terminates connection if authentication failed. End of story.</LI></OL> <LI>CLIENT sends a file download request to SERVER.</LI> <LI>SERVER checks CLIENT's read permission on the requested file.</LI> <OL> <LI>SERVER reports "file does not exist" if CLIENT has no read permission. End of story.</LI></OL> <LI>SERVER sends a download ticket for the requested file to CLIENT.</LI> <LI>CLIENT sends the download ticket to PROXY and wait for PROXY to return the requested file</LI> <LI>PROXY checks whether the requested file is already cached.</LI> <OL> <LI>PROXY returns the requested file to CLIENT if it is already cached. End of story.</LI></OL> <LI>PROXY service account authenticates with SERVER</LI> <OL> <LI>SERVER terminates connection if authentication failed. PROXY reports error to CLIENT. CLIENT will download directly from SERVER. End of story.</LI></OL> <LI>PROXY asks SERVER for the location of VersionControl services.</LI> <LI>SERVER checks whether PROXY service account has read permission on server-level information.</LI> <OL> <LI>SERVER terminates connection if PROXY service account has no read permission on server information. PROXY reports error to CLIENT. CLIENT will download directly from SERVER. End of story.</LI></OL> <LI>SERVER tells PROXY where VersionControl services are.</LI> <LI>PROXY uses CLIENT's download ticket to download the requested file from SERVER.</LI> <LI>PROXY caches the requested file.</LI> <LI>PROXY returns requested file to CLIENT. End of story.</LI></OL> <P><U>Highlights</U>:</P> <OL> <LI>SERVER always checks repository read permission against CLIENT, not PROXY service account.</LI> <LI>SERVER always checks server-level information read permission against PROXY service account; and that is the only permission PROXY service account ever needs.</LI> <LI>PROXY can save SERVER resources by serving CLIENT's downloading request when the requested file is already cached.</LI></OL> <P><U>In other words</U>:</P> <OL> <LI>PROXY and SERVER are binded at the server-level, not team project level.</LI> <LI>PROXY does not act as a surrogate for SERVER; PROXY only does caching and all permission checking is done by SERVER.</LI> <LI>PROXY service account can simply be placed in a server-level group, e.g. "[Server]\Proxy Service Accounts", without any extra security configuration. This effectively grants PROXY service account read permission on server-level information.</LI> <OL> <LI>Adding PROXY service account to either TFServer Admin group, TFServer service account group, or any team project group will also grant PROXY service account read permission on server-level infromation; however, this practice is not recommended because it gives PROXY service account more permissions than it needs.</LI></OL></OL> </div>
첨부파일
스팸 방지용 인증 번호
2943
(왼쪽의 숫자를 입력해야 합니다.)