Accessing TFS via a proxySolved

One of our customers has TurboFloatServer running on a machine that is accessed over the internet. I have tested that this works successfully. But they tell us that their client machines access the internet through a proxy server. Is this likely to cause problems when they request floating licences?

If you use TFS over HTTPS, then no there shouldn't be a problem if the customers properly configured the proxy. See: https://wyday.com/limelm/help/turbofloat-server/#config-https

Thanks. I'm trying to understand that document, I'm sorry but I'm not that familiar with implementing proxy servers. I have a couple of questions:

In our application do we have to change the port number parameter in TF_SaveServer to 443 so that the request goes to the https server?

In your example you use the SCGI address of 127.0.0.1. Does that mean that the TFS Server is on the same machine as the HTTPS server? Can a remote address be specified?

>> "In our application do we have to change the port number parameter in TF_SaveServer to 443 so that the request goes to the https server?"

Nope. TFS talks over SCGI to an HTTPS server. The TFS doesn't "speak" HTTPS (or, more accurately, it doesn't speak TLS 1.2, 1.3, etc.). Instead the TFS speaks SCGI to the HTTPS servers which speaks TLS 1.2, 1.3, etc. to the end-users.

>> "In your example you use the SCGI address of 127.0.0.1. Does that mean that the TFS Server is on the same machine as the HTTPS server?"

Correct. And that's the best way to do things. Don't shard things into a dozen separate machines -- it will just make things harder to maintain.

>> "Can a remote address be specified?"

Yes, but not recommended. It increases complexity and decreases security. Just do it on the same machine. The TFS is very light-weight. And modern HTTPS servers are also very lightweight.

How will that work in your hosted TFS then?

If a customer's IT department puts all their users behind a proxy server, can users connect from their client machines via the proxy to your hosted TFS?

Will they have to configure the proxy machine?

>> "How will that work in your hosted TFS then?"

Our hosted TFS will be on HTTPS. No configuration needed.

>> "If a customer's IT department puts all their users behind a proxy server, can users connect from their client machines via the proxy to your hosted TFS?"

Yes.

>> "Will they have to configure the proxy machine?"

Well ... yes. If they're creating a proxy for "filtering" and control purposes then they'll obviously need to configure it. Otherwise there's no point to creating a proxy in the first place.

Reply
Discard post