hi
i have a LAN and a WEB App
in a separated sub-nets

my question is :
where should i put SQL Server ?
1) in the LAN sub-net ?
2) in the WEB sub-net ?
3) in another sub-net ?

what type of connection do i need ?
could i use IPSec ?

thanks

hi
i just query from the web apps
to the sql server


"doug" <anonymous@discussions.microsoft.com> escribió en el mensaje
news:fbf401c43e7a$095df020$a001280a@phx.gbl...
[quoted text, click to view]

in that case
i should disable, at firewall, all traffic
from outside to sql
but allow to web:80
thats ok

web has disabled all network protocols
except tcp/ip
thus, the only link that can be established
from web to sql is thru tcp/ip , on port 1433 (or other)
and the "connection string"
should contains ... uid+pwd ... in plain text....

does it is a good idea to implement ipSec
between the web and sql servers ?



"doug" <anonymous@discussions.microsoft.com> escribió en el mensaje
news:fc5301c43e80$9b60b9c0$a001280a@phx.gbl...
You could put it in the same subnet as the webserver,
that's the easiest config.

Not sure what you means about the type of connection...

doug
[quoted text, click to view]

well, in fact,
sql and web
would be behind two firewalls

and i thought in change 1433

thanks
bye

"doug" <anonymous@discussions.microsoft.com> escribió en el mensaje
news:fdcc01c43e98$d8058cd0$a501280a@phx.gbl...
Remember I said it's the easiest config, not necessarily
the best. If you have a DMZ, put the web server in there.
Put your SQL box behind the firewall and only let traffic
to the SQL box from the webserver. Also, you could change
the default port of the SQL box to something other than
1433.

doug
[quoted text, click to view]

hi, thanks
oh, a free engine !
i didn't know
....and... you say can i place it in my dmz.sql ?
msde allows 25 concurrent users...
what happen if i get more than 25 clients (IUSR_...) ?
there is no problem ?

thanks



"Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> escribió en el mensaje
news:OWpPfZwPEHA.2468@tk2msftngp13.phx.gbl...
[quoted text, click to view]

Unless you need to access the SQL Server from inside the firewall, I would
put both the web server, and the SQL Server on the outside.

Then, if you have an internal SQL Server, you can use replication to push
data from the internal server to the external server. The external server
could be running MSDE for the purposes of serving your web application.

This way, you do not need to have any rules on your firewall that allow
inbound connections initiated from outside. Instead, all connections from
initiated from inside to the external servers.

Cheers
Ken

[quoted text, click to view]
: well, in fact,
: sql and web
: would be behind two firewalls
:
: and i thought in change 1433
:
: thanks
: bye
:
: "doug" <anonymous@discussions.microsoft.com> escribió en el mensaje
: news:fdcc01c43e98$d8058cd0$a501280a@phx.gbl...
: Remember I said it's the easiest config, not necessarily
: the best. If you have a DMZ, put the web server in there.
: Put your SQL box behind the firewall and only let traffic
: to the SQL box from the webserver. Also, you could change
: the default port of the SQL box to something other than
: 1433.
:
: doug
: >-----Original Message-----
: >in that case
: >i should disable, at firewall, all traffic
: >from outside to sql
: >but allow to web:80
: >thats ok
: >
: >web has disabled all network protocols
: >except tcp/ip
: >thus, the only link that can be established
: >from web to sql is thru tcp/ip , on port 1433 (or other)
: >and the "connection string"
: >should contains ... uid+pwd ... in plain text....
: >
: >does it is a good idea to implement ipSec
: >between the web and sql servers ?
: >
: >
: >
: >"doug" <anonymous@discussions.microsoft.com> escribió en
: el mensaje
: >news:fc5301c43e80$9b60b9c0$a001280a@phx.gbl...
: >You could put it in the same subnet as the webserver,
: >that's the easiest config.
: >
: >Not sure what you means about the type of connection...
: >
: >doug
: >>-----Original Message-----
: >>hi
: >>i just query from the web apps
: >>to the sql server
: >>
: >>
: >>"doug" <anonymous@discussions.microsoft.com> escribió en
: >el mensaje
: >>news:fbf401c43e7a$095df020$a001280a@phx.gbl...
: >>> I would put it on DELL. :)
: >>>
: >>> What are you doing with the SQL server? How are you
: >using
: >>> it?
: >>>
: >>> doug
: >>> >-----Original Message-----
: >>> >hi
: >>> >i have a LAN and a WEB App
: >>> >in a separated sub-nets
: >>> >
: >>> >my question is :
: >>> >where should i put SQL Server ?
: >>> >1) in the LAN sub-net ?
: >>> >2) in the WEB sub-net ?
: >>> >3) in another sub-net ?
: >>> >
: >>> >what type of connection do i need ?
: >>> >could i use IPSec ?
: >>> >
: >>> >thanks
: >>> >
: >>> >
: >>> >.
: >>> >
: >>
: >>
: >>.
: >>
: >
: >
: >.
: >
:
:

I don't know where you got the 25 users from. MSDE has a workload governor.
The details are here:
http://msdn.microsoft.com/library/?url=/library/en-us/architec/8_ar_sa2_0ciq.asp?frame=true

The limit for full performance is 8 concurrent operations. After that,
subsequent concurrent operations are "slowed" down. Read the links for more
information. For most web applications, it is unlikley that you will be
performing many more than 8 operations concurrently. If you are, you'll need
to get the full version of SQL Server.

Cheers
Ken


[quoted text, click to view]
: hi, thanks
: oh, a free engine !
: i didn't know
: ...and... you say can i place it in my dmz.sql ?
: msde allows 25 concurrent users...
: what happen if i get more than 25 clients (IUSR_...) ?
: there is no problem ?
:
: thanks
:
:
:
: "Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> escribió en el mensaje
: news:OWpPfZwPEHA.2468@tk2msftngp13.phx.gbl...
: > Unless you need to access the SQL Server from inside the firewall, I
would
: > put both the web server, and the SQL Server on the outside.
: >
: > Then, if you have an internal SQL Server, you can use replication to
push
: > data from the internal server to the external server. The external
server
: > could be running MSDE for the purposes of serving your web application.
: >
: > This way, you do not need to have any rules on your firewall that allow
: > inbound connections initiated from outside. Instead, all connections
from
: > initiated from inside to the external servers.
: >
: > Cheers
: > Ken
: >
[quoted text, click to view]
: > : well, in fact,
: > : sql and web
: > : would be behind two firewalls
: > :
: > : and i thought in change 1433
: > :
: > : thanks
: > : bye
: > :
: > : "doug" <anonymous@discussions.microsoft.com> escribió en el mensaje
: > : news:fdcc01c43e98$d8058cd0$a501280a@phx.gbl...
: > : Remember I said it's the easiest config, not necessarily
: > : the best. If you have a DMZ, put the web server in there.
: > : Put your SQL box behind the firewall and only let traffic
: > : to the SQL box from the webserver. Also, you could change
: > : the default port of the SQL box to something other than
: > : 1433.
: > :
: > : doug
: > : >-----Original Message-----
: > : >in that case
: > : >i should disable, at firewall, all traffic
: > : >from outside to sql
: > : >but allow to web:80
: > : >thats ok
: > : >
: > : >web has disabled all network protocols
: > : >except tcp/ip
: > : >thus, the only link that can be established
: > : >from web to sql is thru tcp/ip , on port 1433 (or other)
: > : >and the "connection string"
: > : >should contains ... uid+pwd ... in plain text....
: > : >
: > : >does it is a good idea to implement ipSec
: > : >between the web and sql servers ?
: > : >
: > : >
: > : >
: > : >"doug" <anonymous@discussions.microsoft.com> escribió en
: > : el mensaje
: > : >news:fc5301c43e80$9b60b9c0$a001280a@phx.gbl...
: > : >You could put it in the same subnet as the webserver,
: > : >that's the easiest config.
: > : >
: > : >Not sure what you means about the type of connection...
: > : >
: > : >doug
: > : >>-----Original Message-----
: > : >>hi
: > : >>i just query from the web apps
: > : >>to the sql server
: > : >>
: > : >>
: > : >>"doug" <anonymous@discussions.microsoft.com> escribió en
: > : >el mensaje
: > : >>news:fbf401c43e7a$095df020$a001280a@phx.gbl...
: > : >>> I would put it on DELL. :)
: > : >>>
: > : >>> What are you doing with the SQL server? How are you
: > : >using
: > : >>> it?
: > : >>>
: > : >>> doug
: > : >>> >-----Original Message-----
: > : >>> >hi
: > : >>> >i have a LAN and a WEB App
: > : >>> >in a separated sub-nets
: > : >>> >
: > : >>> >my question is :
: > : >>> >where should i put SQL Server ?
: > : >>> >1) in the LAN sub-net ?
: > : >>> >2) in the WEB sub-net ?
: > : >>> >3) in another sub-net ?
: > : >>> >
: > : >>> >what type of connection do i need ?
: > : >>> >could i use IPSec ?
: > : >>> >
: > : >>> >thanks
: > : >>> >
: > : >>> >
: > : >>> >.
: > : >>> >
: > : >>
: > : >>
: > : >>.
: > : >>
: > : >
: > : >
: > : >.
: > : >
: > :
: > :
: >
: >
:
: