Microsoft MVP성태의 닷넷 이야기
TFS : 159. TFS 프록시 서버 동작 방식 [링크 복사], [링크+제목 복사],
조회: 11720
글쓴 사람
정성태 (techsharer at outlook.com)
홈페이지
첨부 파일
 

How Team Foundation Server Proxy 2008 works
; http://blogs.msdn.com/tsyang/archive/2008/03/24/how-team-foundation-server-proxy-2008-works.aspx

TFS 에 대해서 잘 아시는 분들조차도,,, TFS Proxy 서버가, 인트라넷에 설치된 TFS Application Tier를 인터넷에 노출시킬 수 있는 기능을 가진 것으로 오해하는 경우가 종종 있습니다.

하지만, 직접 설치해 보면 아시겠지만... TFS Application Tier 역시 인터넷에 반드시 연결되어 있어야 한다는 것을 알 수 있습니다. 위에 소개한 토픽을 읽어보시면 실제로 TFS App Tier 에 질의가 되는 과정을 확인할 수 있습니다.

[위의 내용이 간단해서, 아예 아래에 실어봅니다.]
Ever wondering how TFS Proxy works? While this MSDN article "Team Foundation Server Proxy and Source Control" ( http://msdn2.microsoft.com/en-us/library/ms252490.aspx ) provides a great overview, this blog post will add an end-to-end story for TFS users who likes to dig into technical details.
Let's see what happens among a user (CLIENT), TFServer (SERVER) and TFS Proxy (PROXY) when the user is trying to downloading a file from TFServer.
  1. CLIENT authenticates with SERVER.
    1. SERVER terminates connection if authentication failed. End of story.
  2. CLIENT sends a file download request to SERVER.
  3. SERVER checks CLIENT's read permission on the requested file.
    1. SERVER reports "file does not exist" if CLIENT has no read permission. End of story.
  4. SERVER sends a download ticket for the requested file to CLIENT.
  5. CLIENT sends the download ticket to PROXY and wait for PROXY to return the requested file
  6. PROXY checks whether the requested file is already cached.
    1. PROXY returns the requested file to CLIENT if it is already cached. End of story.
  7. PROXY service account authenticates with SERVER
    1. SERVER terminates connection if authentication failed. PROXY reports error to CLIENT. CLIENT will download directly from SERVER. End of story.
  8. PROXY asks SERVER for the location of VersionControl services.
  9. SERVER checks whether PROXY service account has read permission on server-level information.
    1. SERVER terminates connection if PROXY service account has no read permission on server information. PROXY reports error to CLIENT. CLIENT will download directly from SERVER. End of story.
  10. SERVER tells PROXY where VersionControl services are.
  11. PROXY uses CLIENT's download ticket to download the requested file from SERVER.
  12. PROXY caches the requested file.
  13. PROXY returns requested file to CLIENT. End of story.

Highlights:

  1. SERVER always checks repository read permission against CLIENT, not PROXY service account.
  2. SERVER always checks server-level information read permission against PROXY service account; and that is the only permission PROXY service account ever needs.
  3. PROXY can save SERVER resources by serving CLIENT's downloading request when the requested file is already cached.

In other words:

  1. PROXY and SERVER are binded at the server-level, not team project level.
  2. PROXY does not act as a surrogate for SERVER; PROXY only does caching and all permission checking is done by SERVER.
  3. PROXY service account can simply be placed in a server-level group, e.g. "[Server]\Proxy Service Accounts", without any extra security configuration. This effectively grants PROXY service account read permission on server-level information.
    1. Adding PROXY service account to either TFServer Admin group, TFServer service account group, or any team project group will also grant PROXY service account read permission on server-level infromation; however, this practice is not recommended because it gives PROXY service account more permissions than it needs.







[최초 등록일: ]
[최종 수정일: 3/25/2008]


비밀번호

댓글 작성자
 




... 31  32  33  34  35  36  [37]  38  39  40  41  42  43  44  45  ...
NoWriterDateCnt.TitleFile(s)
269정성태5/4/20069030Visual Studio 2005 Team System Level 200 Course Material
268정성태5/4/20069302Microsoft Component Installer Software Development Kit for Windows (x86) Version 2.0
267정성태5/4/20069206101 Code Samples for Visual Basic 2005
266정성태5/3/200611021Consolas Font Pack for Microsoft Visual Studio 2006 [2]
264정성태5/1/200610196Team System for C++ Developers
262정성태5/1/200619776Registry 등록 없이 COM 개체 사용 [1]파일 다운로드2
261정성태4/30/2006100364GB 메모리 인식 [2]
259정성태4/30/20069101Building ASP.NET 2.0 Web Sites Using Web Standards
260정성태4/30/20068814    답변글 XHTML Validator Modulle
258정성태4/29/20069394WebServiceStudio 2.0
263정성태5/1/20069036    답변글 Calling an Arbitrary Web Service
257정성태4/29/20069003TypeForwardedToAttribute
256정성태4/29/20069261Windows API - Using Condition Variables
252정성태4/26/20069472한글 관련 메세지 정리파일 다운로드1
251정성태4/26/20069931IIS 7.0 에서 소개되는 새로운 기능들 [1]
250정성태4/25/200610627툴 소개: VisualNDepend
249정성태4/25/200616617Integrating a debugger into Reflector
265정성태5/1/200610880    답변글 Deblector: First Version
285정성태5/15/20068983    답변글 New Deblector version ( an Add-In to debug with reflector )
248정성태4/21/20069320VS.NET 2005 Add-In : CSS Properties Window
247정성태4/21/20069254VS.NET 2005 Add-In : Spell Checker for HTML and ASP.NET pages
244정성태4/19/20069217SQL Server 2005 Service Pack 1
241정성태4/19/20068679VSTS Annotations for C++: Beyond Just Documenting Method Behavior [1]파일 다운로드1
240정성태4/18/20069309Accessing System Power and Network Status Using SENS
253정성태4/29/20069656    답변글 [HowToUse]: Accessing System Power and Network Status Using SENS
239정성태4/18/20069239Display a Web Page in a Plain C Win32 Application
... 31  32  33  34  35  36  [37]  38  39  40  41  42  43  44  45  ...