TFSProxy的主要目标是缓存版本控制文件并减少网络流量。例如，在美国和欧洲设有两个办公室的情况下，欧洲的TFS用户不必从美国的主TFS服务器下载所有版本控制文件。通过在欧洲设置TFS代理，可以缓存在美国和欧洲之间传输的文件，从而提高性能。TFSProxy不负责用户认证，而是验证用户访问缓存文件的有效性。
TFS Proxy 
The primary goal of TFS Proxy is to cache Version Control files and reduce the network traffic. For e.g. if we have 2 offices one in US and another in Europe and the main TFS server is in US. We do not want every TFS user in Europe to download every VC file from US. So we can have a TFS proxy in Europe office and then TFS Proxy will help cache the files transferred between US and Europe hence improving performance. But all the authentication is still handled by the main TFS Server in this case the one in US. TFS Proxy does not authenticate users. It does check the validity of the user to allow him/her to access cached files, but the actual authentication is performed by TFS Server.
Here is a extract from MSDN help on how TFS Proxy validates the users.
Security
Team Foundation Server Proxy uses a pre-authenticated ticket scheme for determining whether a requesting user is authorized to view the content of the requested file. In this scheme, the user’s client contacts the master source control server and if the user is authorized, the client is provided a digitally signed ticket that contains the details of the file being requested. The client then presents the ticket to the proxy server. This use of public/private key signatures allows the proxy to be certain that the ticket came from the server and that the user is therefore authorized to view the file. The proxy then looks into the cache to see whether it can service the request, and if not, requests the file from the server and adds it to the cache.
Link to MSDN Document: Team Foundation Server Proxy
扫一扫
1217
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
