Web前端SharePoint Server与SQL Server的通信 [英] web front SharePoint server communication with SQL server

问题描述

你好

我们的客户询问是否存在一种方法可以出于安全目的关闭Web前端服务器和数据库服务器之间的所有端口(DMZ，APP和数据库 在其他区域)?

我的客户正在询问Microsoft关于他的问题的证明?

my client is asking about a proof  from Microsoft  regarding  his question ?

我的客户问为何 SharePoint中的通讯只是在应用服务器和数据库服务器?  

谢谢

Alh

推荐答案

应用程序服务器运行应用程序服务，例如托管元数据服务，为托管站点提供服务器场范围的服务在Web前端上.  应用程序服务器不会生成显示网站本身的页面. WFE 是检索和分发网站本身的网页的服务器.因此，WFE服务器必须能够直接与SQL数据库服务器通信.这就是它设计的工作方式.您可以对其进行设置，以便WFE 使用一个自定义端口与SQL Server进行通信，但是它必须能够直接与数据库服务器联系.  

Application servers run application services, like the managed metadata service, that provide farm wide services to sites that are hosted on the Web Front end.  Application servers do NOT generate the pages that display the site itself.  The WFEs are the servers that retrieve and distribute the Web pages that are the sites themselves.  So the WFE servers MUST be able to talk directly to the SQL database server.  That's the way its designed to work.  You can set it up so that the WFE uses one custom port to talk to the SQL server, but it must be able to contact the database server directly.  

所有SharePoint服务器都需要与SQL服务器直接通信的另一个原因是SharePoint服务器场配置存储在SQL服务器中.  所有服务器都必须能够直接从SQL读取.

Another reason that ALL the SharePoint servers need direct communication with the SQL server is that the SharePoint Farm configuration is stored in the SQL servers.  All the servers need to be able to read that directly from SQL.

这是一篇Microsoft文章，讨论了如何通过安全性加强SharePoint环境，特别是需要打开哪些端口以使服务器与SQL进行通信.

Here's a Microsoft article that discusses how to Security harden your SharePoint environment, specifically what ports need to be open for the servers to talk to SQL.

https://technet.microsoft.com/en-us/library/cc262849.aspx #PortProtocolService

这篇关于Web前端SharePoint Server与SQL Server的通信的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！