Scale-wide architecture
Each CCF Role such as Discovery, Policy, STS, Core Services, SSO, and Application Management Services can run on its own private VLAN in a Network Load Balanced Mode. In addition, a CCF role can use its own SAN storage. A role can manage its own availability SLA without impacting other roles. Broadly, following are the roles in the CCF environment:
- Core Server
- ESSO Server
- Database Server
- Discovery Services
- Policy Services
- Security Token Services
- Configuration System
- Workflow Host
The diagram below shows the distribution of roles:
.png "Dd632594.dcfaebc9-5d82-4c14-aa85-9829099d787a(en-us,TechNet.10).png")
Scale Wide Architecture
In the above Architecture, the Security Token Services and the Discovery Services are in the DMZ. This allows scenarios where users can leverage the infrastructure from Internet of from a different domain
If there is no need to have external users, then these roles should be removed from the DMZ.