Home/ Questions/Q 81353
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-10T21:26:48+00:00

We have an intranet asp.net web application which uses the OOTB ASP.net membership and

  • 0

We have an intranet asp.net web application which uses the OOTB ASP.net membership and role providers.

Now we are planning to expose the application to internet, by moving the web server to the DMZ as represented in the following (crappy) text diagram

               External                    Internal      internet --- Firewall --- Web server --- Firewall --- App Server --- Database                               DMZ                              Intranet

Now the problem is that the asp.net membership and role providers on the web server cant connect to the sql server because of the internal firewall.

Have you ever faced such a scenario before? Will you recommend opening up ports in the internal firewall so that the webserver can directly connect to the SQL server? What other alternatives do I have (otherthan wring a custom provider myself)?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Changing your DMZ policy and opening ports is usually REALLY hard. You might have better success doing what I did: expose a WCF service inside the network and communicate with it over HTTP on port 80.

    Zero friction with the LAN folks, and I just mimic the same exact (though crappy) API that .NET gives us 🙂

    Edit: to clarify, this means I have a RemoteRoleProvider that is configured like this:

    <roleManager enabled='true' defaultProvider='RemoteRoleProvider'>    <providers>       <add name='RemoteRoleProvider' type='MyCorp.RemoteRoleProvider, MyCorp' serviceUrl='http://some_internal_url/RoleProviderService.svc' />    </providers> </roleManager>
    • 0