Azure Devops 服务和 VPN - 加密数据

Azure Devops Services and VPN - encrypt the data

我们即将使用 Azure devops 服务 (Cloud tfs) 并将我们的代码存储在 azure devops git repo

并在混合本地服务器上构建工件。

我们会将工件从 vm 转移到 azure devops 服务,我们将发布一个版本,然后将其部署到同一个 vm,我们将 运行 在 IIS 上。

问题是我们需要使用 vpn 来加密我们的数据还是已经加密了?

do we need vpn between azure devops services and the vm to drop the artifacts ?

您需要确保可以从 Internet 访问您的 VM,或者您可以在您的 VM 上部署 self-hosted 构建代理。检查以下 link:

https://docs.microsoft.com/en-us/azure/devops/pipelines/agents/agents?view=azure-devops&tabs=browser#communication-to-deploy-to-target-servers

When you use the agent to deploy artifacts to a set of servers, it must have "line of sight" connectivity to those servers. The Microsoft-hosted agent pools, by default, have connectivity to Azure websites and servers running in Azure.

If your on-premises environments do not have connectivity to a Microsoft-hosted agent pool (which is typically the case due to intermediate firewalls), you'll need to manually configure a self-hosted agent on on-premises computer(s). The agents must have connectivity to the target on-premises environments, and access to the Internet to connect to Azure Pipelines or Team Foundation Server, as shown in the following schematic.

do we need vpn between our computers and connecting to azure devops services to use git?

一般来说,您的电脑只需要能够上网即可。

Azure DevOps Services 使用 Azure 的平台即服务基础设施和许多 Azure 服务,包括 Azure SQL 数据库,为您的开发项目提供可靠的、全球可用的服务。我们希望您对您的数据得到妥善处理并用于合法用途充满信心。该保证的一部分涉及适当限制使用,以便仅出于合法原因使用您的数据。

检查以下内容link:

https://docs.microsoft.com/en-us/azure/devops/organizations/security/data-protection?view=azure-devops