SharePoint 2013 Instance 1-building a three-tier server farm 2-Scenario Design

Source: Internet
Author: User
Tags dedicated server account security least privilege

1. Server Load Design

In the previous section, we saw that the servers were made up, with the basic design of redundancy for each of the SharePoint Server (hereinafter referred to as SPS) servers, not just high availability requirements. Because a single server is constrained by processing power, the ability to provide is limited, while multiple servers can balance the load, the performance of the whole system will be greatly improved. But how many servers do we need to serve, we can estimate it beforehand.


1) calculated from the number of users, the design is as follows:

Internal staff: 22000 people, at the same time at peak time on-line ratio 80%, peak hours per hour 36, peak at the same time to access the ratio of 50%

External: 100000 people, at the same time at peak time online ratio 30%, peak hours per hour 18, peak at the same time to access the ratio of 30%

This can roughly calculate the number of requests per second at peak (RPS, requests per second) for

(22000*80%*36*50%+100000*30%*18*30%)/3600= 133


According to Microsoft test data, a 8-core 16G memory front-end server processing requests up to 80RPS, so that 2 front-end servers can basically meet the requirements.


Similarly, the application server does 2 configurations.


2) from the business data to calculate, the design is as follows:

Business Data 1200GB, average document size 200KB

This calculates the number of document items that need to be processed:

1200gb/200kb=600 million items


The list data has 200 items, each item counts 20 columns, each column counts 1000 items

This calculates the number of items that need to be processed for the list:

200*20*1000=400 million items


So light documents and list items have 10 million items

Because you include documents, Web pages, list items, and images, each entry in a SharePoint list can be listed as an item, and the actual number of items may be more than 1.5 times times the calculated value.


Based on the Microsoft Search Architecture Example:

Content Volume

Sample Search Architecture

10 million item (+)

Small Search server farm

10 million-40 million items

Medium Search Server farm

40 million-100 million items

Large Search server farm



Based on the table above, it is better to build a medium Search server farm here. Due to some conditions and objective reasons, this project only demonstrates the use of a search dedicated server to provide search services.


According to Microsoft test data, a small search farm can crawl 50 documents per second and serve 10 queries per second. So for the first full crawl, 10 million items take 55 hours to crawl.


2. Account Security Design

We often use the same administrator account to complete all configurations in an experimental environment, but doing so in a production environment poses a variety of risks.

By giving each account the least privilege, not only can effectively limit the non-prospective personnel to obtain the account after the attack damage to the system, and different services account management can make the account of the scope of use clearer, reduce system risk.


The account is designed as follows (all accounts are domain accounts):

Name

Role

Permissions

Sql_install

SQL Server Installation Account

Members of the SQL Server local Administrators group

Sql_service

SQL Server service Account

No

Sp_install

SPS Installation and Configuration account

Members of the SPS server local Administrators group

SQL Server securityadmin and dbcreator permissions

Sp_farm

Farm Admin Account

.

SQL Server securityadmin and dbcreator permissions

(SPS will automatically add this permission at configuration time if no append is in advance)

Sp_pool

Application pool Account

No

Sp_service

SPS Service Account

No

Sp_profile

Synchronizing the user profile account with AD

AD Replication Directory Change permissions



3. Port Security Design

A specific port is used to communicate between servers in an SPS farm and to provide specific services.

This allows the following ports to be configured on the SPS server's firewall

Service

Open ports

SharePoint Web Services

TCP 80, TCP 443

SharePoint Central Administration

Custom ports

Communication between Web servers and service applications

TCP 32843~32845

User Code Service

TCP 32846

File sharing

TCP 137,udp 138,tcp 139,tcp 445

Search Index Component Service

TCP 16500~16519

AppFabric Caching Service

TCP 22233~22236

Windows Communication Foundation Communication port

TCP 808

Mail SMTP

TCP 25

User Account Synchronization

TCP&UDP 389,tcp&udp 53,tcp 5725


This article is from the "Iron Fist of the Invincible Speaker" blog, please be sure to keep this source http://yaojiwei.blog.51cto.com/762134/1630549

SharePoint 2013 Instance 1-building a three-tier server farm 2-Scenario Design

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.