TFS SSL Setup over the internet - tfs

I am new to TFS and have been having issues with setting it up to be accessible on the internet.
I have set up TFS 2008 with SSL(HTTPS) on ports 8081, 81, and 17013 etc... for the respective services, on a single server deployment, with basic authentication, with server exposed as a DMZ by my router.
How can I access the TFS server outside my home if the ports are blocked on the network I am on, like those WIFI hotspots or in my company's network.
Please advice.
Cheers.

You can't. You'll need to use a port that isn't blocked. 443 should be a safe bet. If all else fails, and you don't care about moving your default websites (sharepoint, report server, etc) to another port, use 80.
NOTE: make sure you follow the TFS specific directions on MSDN. If you just start changing stuff in IIS Admin you will be very unhappy.

Related

Jenkins Server - Issues with setting URL

I am trying to set up an internal Jenkins server for our QA team and facing some issues with the server URL. This is inside a corporate network and all sort of firewall and proxy settings are in place, however we need to access the server only with in our internal network. This server runs from a Mac Mini. I was able to install and access the server without any issues using localhost:8080.
I tried to set a custom URL (something like testjenkins.local:8080)under the Manage Jenkins option and never was able to access the server. The only option worked for me is with the IP address (IP:8080). I was able to access the server from other machines in the network using this URL.
The real problem with the above setup is that the machine IP changes(I am not able to make it static), and hence wont be able to get an always working URL.
Highly appreciate if any one guide me in the wright direction.
Given you have a dynamic IP on your server, a good alternative would be using ngrok. Ngrok can expose the port 8080 of that server to the internet via secure tunnels, and you can access it via an URL, so changes in the IP won't affect it.
However, ngrok exposes the server to the whole Internet. To make it accessible only for your team you can add authentication in both ngrok tunnel and Jenkins server (would it work for you?).

Does JIRA work on Google Compute Engine VM

Is JIRA supported in GCE? If so, how to make it work?
We have installed 64-bit .bin of JIRA(6.4.1), and opened necessary custom http ports under Networks.
Started JIRA as service, but unable to see it work via browser. No error message than, timed out error!
Any help would be highly appreciated.
Note: We are new to Google Cloud Platform.
Did you enable the http and https services on your instance ? By default the GCE instance does not allow Http and Https traffic, you have to do it manually.
The Jira configuration for Google Compute Engine can be tricky. You need to make sure that:
The firewall rules under Netowrking allows a connection to Jira HTTP port or the HTTP enables in VM properties
The global Networking rules allow TCP traffic on this port
The virtual network have routes configured
If you use Apache as proxy for Jira (recommended) then make sure Apache is configured to point to the Tomcat port
Your Tomcat is configured
You have enabled port allocation using setcap utility
Your local machine firewall enables the connection (in Red Hat ipconfig is enabled by default and blocks the connections)
As you can see it may be tricky to install Jira on Google Cloud. It may be a good idea to use a deployment service like Deploy4Me to do this quickly and automatically.

I can't access port from outside

I'm using a dedicated server on aruba with ZyWall firewall. I have two ports listening in the server, using telnet from inside I can connect to both the ports. If I try to telnet from outside I can access only to one of them.
I have not internal firewall, and I don't understand how I can see if the ZyWall is blocking the port access or it is forwarding all connections to that port to another ip.
Have you any suggestion?
I found the solution. I accessed the firewall web interface from a firefox installed in the dedicated server behind the firewall (the web interface is not accessible from outside), then I made two steps:
I added a rule on which I permit the access to the target port. I made this using the "Service" tab in the Security->Firewall menĂ¹.
In the matrix between LAN, WAN, DMZ etc.. I modified the rule "from WAN to LAN" and I added the rule made in the previous step.
Now it works!

Allow CRM 2011 to access from external server

I have set up a CRM 2011 in a vmware under port 5555. I can access the CRM system fine locally. However, when I tried accessing from my host machine I got IE cannot display webpage error. I can access IIS port 80 though. I have added Inbound Rule to TCP port 5555 on my Windows Server 2008 R2 CRM server. Anything else I have to do?
Are you using anything such as no-ip, dyndns?
You have to make sure your router is mapped to route the port: 5555 to your server Ip, is your internet with static IP?
Hope that helps.
Renato
This is an old post however might help someone...
You need to allow port 5555 on your VPC (VMWare)
Go to Firewall settings and add exception for this port. Once done you should be able to access CRM externally.
Below is a detailed blog about it
http://rokhri.com/blog/crm-how-to-access-crm-externally-installed-on-vpc/

Can you please give me a Step by Step instructions to set up TFS in such a way that my team can access it from anywhere in the world?

Basically, Me and my team are working in the geographically dispersed location,My teammate is is in USA and I'm in India. I've Installed the TFS on my development machine (Windows Vista) and I want to my team to access the same exact project which i'm working on anytime,anywhere.
We dont have any funds to buy a hosting account or We dont have funds to create a VPN Account from the internet (my ISP doesnt provide me one...awwww).
I don't run TFS, but this is more of an IT question than a TFS-specific one, I think.
My coworker showed me a trick that precludes the need for VPN, but is still secure. You'll need to set up your firewall to route traffic from one of your WAN IPs to an internal server that allows SSH access. These steps will be router and internal network-dependent.
Then download and install PuTTY or PortaPuTTY. Set up a profile that points to your public WAN IP and SSH port, and also add SSH tunneling to route a port on your local computer to the TFS server IP and port.
Let's say you choose a local port of 12345 and your internal TFS server IP is 192.168.0.100 and the TFS port is 1234. When you connect to TFS with PuTTY, instead of specifying its IP, you'll connect via localhost:12345.

Resources