博客园_beyondjay

An excellent mockup tool -- Balsamiq

2010-08-30T08:33:00Z

Balsamiq is a mockup tool which can enable you Create software mockups in minutes.

Today, I need to provide a UI prototype to my client. At the beginning, I preferred to use Visio, but suddently I realized, depends on my former experience, it may not be a quick and decent way to draw a web page by using Visio.

Balsamiq stayed in my computer for quite a long time, but I never use it to drew the diagram and show it to my client. Why not try it today?:)

After 5 mintues, the Balsamiq proved my suppose. It only spends me 5 mintues to finish a prototype like this:

I believe that Balsamiq is fairly suitable for those people who do not have a plenty of time to draw a precise picture. It can reduce your workload significantly, and help you focus on the production delivery.

Here is the link:http://www.balsamiq.com/

本文链接

Impression of Team Foundation Server 2010

2010-07-28T03:04:00Z

I built up a team foundation server in VM. It goes without saying that this tool is really fabulou.

I strongly recommed you to add the server into domain before you install the service. Dealing with machine name changes truly drive me nuts.

Feature 1, two types of development processes are available

Integrated with Agile & CMM develop processes, the team can pick up proper template they need.

Other development model like scrum will be available soon as well.

CMMI waterfall working process. Analysis->Requirement->Architecture->Development->Testing->Delivery.

Here is the agile. Divided whole production into user stories, split each story into some tasks, delivery testable version regularly, every deliver package implemented several user stories.

Feature 2, Automatically build

Can automatically build on the specified time, and all unit tests will be executed and generate a report. One unit test can directly link to one user story, which means you could see which user story is failed immediately.

In addition, build service can also run every time after code is checked in.

Feature 3, A great amount of statistics reports.

Test report

User story implement report

Bug report

Velocity report

Others

My conclusion:

Team foundation is a powerful tools integrated many prevalent ideas of software development process. In addition, it is a must that the team need to have a full-time PQA, who know team foundation very well, to master the server and process.

P.S

Some diagrams above are obtained on http://www.slideshare.net/.

本文链接

Impression Of Book – Beautiful Architecture

2010-07-19T06:27:00Z

网上闲逛的时候看到了这本书，但是普遍评价不是很高，但是看到了目录中有关于Fackbook的内容，所以还是买了回来。主要是对Fackbook的技术好奇，MySpace构建在.NET上已经被证明是个杯具，到头来微软也没研究深入到这个地步，只能是自己用非托管代码来实现。很囧啊。

其实，像网上的书评差不多，前三章才是书的精华，一个照相馆的IT方案和Fackbook的。照相馆的方案并不复杂，但是让我体会到了一个好的架构就是一个适用并可以适当应付未来扩展的方案。Facebook里的社会关系数据查询服务FBML给我留下了很深的印象，有点像LINQ，用这种方式来实现复杂的社区数据和外部的交互真是很优雅。

总的来说这是一本值得一读的书，但是由于后面几章的技术领域跨度过大，所以读读网上前几章的电子版，其实也够了。

本文链接

(翻译)十分钟内安装，配置，使用Windows Server AppFabric

2010-07-14T06:05:00Z

几个星期前我写了关于Windows Server AppFabric的博客，许多朋友问到如何安装和配置Velocity。确实，在beta版本里这有点让人困惑，但是，在release版本里这一切方便多了。

如下就是某位朋友给我的建议：

你有尝试过安装一个appfabric吗？我建议你写篇博客，兴许可以用dasblog作为例子，我会非常愿意知道如何安装它，这确实有点太难了。

没问题，非常愿意效劳。我不会用dasblog来演示，但是我会给你一个可以在10分钟内实现的简单例子。

获取和安装AppFabric

你可以去http://msdn.com/appfabric直接下载，或者用Web Platform Installer.

使用installer选择AppFabric Cache。如果你使用的是windows 7，你可以安装IIS 7 Manager for Remote Administration从windows 7来管理你的远程IIS服务器。

注意：你也可以通过一个无人值守的安装，SETUP /i CACHINGSERVICE，来获得caching服务。

配置工具框会跳出，提示你进行一个简单的安装向导。你可以选择安装AppFabric Hosting Services中的Monitoring和Workflow Persistence，因为我只是为了实现caching，所以跳过了它。

Velocity Caching Service需要知道去哪里存储配置项，能用两种方式，数据库或者共享的XML文件。如果你使用XML，你需要确保service account有相应的权限。在这里，我选择使用数据库。向导会帮你完成配置工作。单击Next然后确认完成。

配置数据库。

好了，我们看看它的功能吧。

从PowerShell启动和管理你的内存集群

咋弄呢？先去开始菜单，输入Caching，你会看到一个叫"Caching Administration Windows PowerShell"的选项。这里就是你连接到cache的入口，此外它还提供了检查状态，创建一个新的cache等功能。记得使用管理员的帐号运行它。

如果你键入"get-command *cache*"你会看cache management的所有不同的命令。我输入start-cachecluster。

C:\> Start-CacheCluster

HostName : CachePort                Service Name          & ;#160;                 Service Status     Version Info
--------------------------------            ---------------------------                ------------------     ---------------------
HANSELMAN-W500:22233          AppFabricCachingService         UP                       1 [1,1][1,1]

Cool，它开始工作了。如果你到配置数据库（或者你之前选择存储配置的XML文件）去看看，你会看到有一台机器已经在我的内存集群中了。我可以有很多台这样的机器，并且在其中某台机器当机的情况下系统仍然能够保持数据的高可靠性。

下载AppFabric Caching Samples，然后在Visual Studio中打开。我在web项目中发现了两个新的，不大常见的引用，Microsoft.ApplicationServer.Caching.Core 和.Client。

请记住，处于安全的考虑，所有的东西默认都是不启用的，所以你需要赋予账户相应权限。我正在使用的帐号是ScottHa，所以我需要运行

Grant-CacheAllowedClientAccount scottha

…你也需要为你的IIS运行账户执行相同的操作。

为ASP.NET使用Memory Cache

请记住你可以切分你的cache到不同的逻辑盘，同时，如果你愿意，一个cache集群也可以为多个应用服务。

你的cache可以与web.config或者代码挂钩。这里是一个手工创建Helper方法的代码例子，这些数据可以从你喜欢的任何地方获取，你只需要告诉机器去与特定的端口号沟通，其他的一切都是自动完成的。

Cache也能被分区。例如，我在使用一个名叫"default"的cahce，但我也可以使用多个逻辑分块，像"shoppingcart" and "productcatalog"。

   1:  using Microsoft.ApplicationServer.Caching;

   2:  using System.Collections.Generic;

3:

   4:  public class CacheUtil

   5:  {

   6:    private static DataCacheFactory _factory = null;

   7:    private static DataCache _cache = null;

8:

   9:    public static DataCache GetCache()

  10:    {

  11:        if (_cache != null)

  12:            return _cache;

13:

  14:        //Define Array for 1 Cache Host

  15:        List<DataCacheServerEndpoint> servers = new List<DataCacheServerEndpoint>(1);

16:

  17:        //Specify Cache Host Details

  18:        //  Parameter 1 = host name

  19:        //  Parameter 2 = cache port number

  20:        servers.Add(new DataCacheServerEndpoint("mymachine", 22233));

21:

  22:        //Create cache configuration

  23:        DataCacheFactoryConfiguration configuration = new DataCacheFactoryConfiguration();

24:

  25:        //Set the cache host(s)

  26:        configuration.Servers = servers;

27:

  28:        //Set default properties for local cache (local cache disabled)

  29:        configuration.LocalCacheProperties = new DataCacheLocalCacheProperties();

30:

  31:        //Disable tracing to avoid informational/verbose messages on the web page

  32:        DataCacheClientLogManager.ChangeLogLevel(System.Diagnostics.TraceLevel.Off);

33:

  34:        //Pass configuration settings to cacheFactory constructor

  35:        _factory = new DataCacheFactory(configuration);

36:

  37:        //Get reference to named cache called "default"

  38:        _cache = _factory.GetCache("default");

39:

  40:      return _cache;

  41:    }

  42:  }

一旦我们的cache设置好了，用起来是非常容易的。

   1:  m_cache.Add(orderid, order);

和

   1:  Order order = (Order)m_cache.Get(orderid);

或者更新已经存在的对象

   1:  m_cache.Put(orderid, order);

检查cache的状态

在cache中加入和取出了一大堆对象后，我可以到PowerShell去查看状态

C:\> get-cache

CacheName            [Host]
                               Regions
---------------            ---------------
default                    [HANSELMAN-W500:22233]
                               Default_Region_0103(Primary)

C:\> Get-CacheStatistics default

Size         : 2493
ItemCount    : 5
RegionCount : 5
RequestCount : 17
MissCount    : 3

你可以使用性能监控器，它提供了许多不同类别的计数器。之如我之前所提到的，你可以使用不同的cache分区，像"default" 或者 "poopypants"，也可以分别或一起检查他们的状态。

当然，在我重启了我的web服务器，我的订单仍然存在。你可以高效地维护一个庞大的，可分区存储，并跨机器的hashtable。

用AppFabic替换ASP.NET Session存储

在ASP.NET 4中通过web.config用AppFabric替换默认的Session State存储方法也是件很容易的事情。下面是一个web.config的例子。

   1:  <?xml version="1.0" encoding="utf-8" ?>

   2:  <configuration>

3:

   4:    <!--configSections must be the FIRST element -->

   5:    <configSections>

   6:       <!-- required to read the <dataCacheClient> element -->

   7:       <section name="dataCacheClient"

   8:           type="Microsoft.ApplicationServer.Caching.DataCacheClientSection,

   9:              Microsoft.ApplicationServer.Caching.Core, Version=1.0.0.0,

  10:              Culture=neutral, PublicKeyToken=31bf3856ad364e35"

  11:           allowLocation="true"

  12:           allowDefinition="Everywhere"/>

  13:    </configSections>

14:

  15:    <!-- cache client -->

  16:    <dataCacheClient>

  17:      <!-- cache host(s) -->

  18:      <hosts>

  19:        <host

  20:           name="CacheServer1"

  21:           cachePort="22233"/>

  22:      </hosts>

  23:    </dataCacheClient>

24:

  25:    <system.web>

  26:      <sessionState mode="Custom" customProvider="AppFabricCacheSessionStoreProvider">

  27:        <providers>

  28:          <!-- specify the named cache for session data -->

  29:          <add

  30:            name="AppFabricCacheSessionStoreProvider"

  31:            type="Microsoft.ApplicationServer.Caching.DataCacheSessionStoreProvider"

  32:            cacheName="poopylands"

  33:            sharedId="MySharedApp"/>

  34:        </providers>

  35:      </sessionState>

  36:    </system.web>

  37:  </configuration>

资源和链接

这里是一个Ron Jacobs提供的一个非常有用的幻灯片。Microsoft Windows Server AppFabric Slides at SlideShare.

像其他应用一样，相对抽象一点的应用总是更加好用的。如果你有一个已经存在的cache方案(EntLib或其他)，你也可以将它们切换至AppFabric Caching.

相关链接

AppFabric on MSDN
Configuring an ASP.NET Session State Provider (Windows Server AppFabric Caching)
How to Create a Simple Enterprise Library Cache Manager Provider for Velocity
AppFabric Caching Forums
AppFabric "Velocity" Caching Documentation
Windows Server AppFabric 1.0
1. - - Windows Server 2003 Distributed Cache Client - 当Windows Server 2008启用了caching服务的时候，你现有的windows2003应用也可以使用cache客户端来访问cache服务。
Tracing and Caching for Entity Framework available on MSDN Code Gallery

备注

此原文链接：Installing, Configuring and Using Windows Server AppFabric and the "Velocity" Memory Cache in 10 minutes，作者是Scott Hanselman。

此文同发个人博客www.iamtonyzhou.com，欢迎访问:)

本文链接

jQuery插件floatIt，浮动div并居中在上方或者下方

2010-07-09T02:30:00Z

网上找的太重量级了，写了个轻量级的。满足自己的需求就好，以后再加各种浮动，比如右下角之类的。

/*
 * jQuery float it plugin
 * Version 1.0 (8-July-2010)
 * @requires jQuery v1.4 or later
 *
 * Copyright (c) 2009-2010 Tony ZHOU
 * Dual licensed under the MIT and GPL licenses:
 */
 
jQuery.fn.floatIt = function (options) {
    //parameter like { location: "bottom" } or { location: "top" }
    // by extending the default settings, we don't modify the argument
    settings = jQuery.extend({ location: "bottom" }, options);

    var h = $(window).height();
    var w = $(window).width();

    var topLocation = 0;
    var leftLocation = w / 2 - $(this).width()/2;

    var currentId = $(this).attr("id");

    switch (settings["location"].toLowerCase()) {
        case ("bottom"):
            topLocation = h - $(this).width();
            $(window).scroll(function () {
                var topLocation = $(document).scrollTop() + $(window).height() - $("#" + currentId).height(); //closure
                $("#" + currentId).css({ position: "absolute", top: topLocation, left: leftLocation });
            });
            break;
        case ("top"):
            topLocation = 0;
            $(window).scroll(function () {
                var topLocation = $(document).scrollTop(); //closure
                $("#" + currentId).css({ position: "absolute", top: topLocation, left: leftLocation });
            });
            break;
        default:
            topLocation = h - $(this).width();
            break;
    }

    $(this).css({ position: "absolute", top: topLocation, left: leftLocation });
};

用起来的时候直接$("divname").floatIt()，默认是bottom.

效果就是这样

要完整例子的话请移步到 http://www.iamtonyzhou.com/javascript/jquery-plugin-float-div-on-the-top-or-bottom-and-keep-it-in-the-center/

点击下图的链接下载

本文链接

some useful links for dealing with blg file and performance analyses

2010-06-18T07:18:00Z

How To: Use CLR Profiler

http://msdn.microsoft.com/en-us/library/ms979205

patterns & practices: Performance Testing Guidance

http://perftesting.codeplex.com/wikipage?title=How%20To:%20Identify%20a%20Disk%20Performance%20Bottleneck%20Using%20SPA&referringTitle=How%20Tos&ProjectName=perftesting

Log Parser 2.2

http://www.microsoft.com/downloads/en/confirmation.aspx?familyId=890cd06b-abf8-4c25-91b2-f8d975cf8c07&displayLang=en

本文链接

The time zones of Event log

2010-06-09T06:59:00Z

Our team gain the event log from terminal server located in Paris frequently.

Time zones and Daylight Saving Time (DST) are sometimes confusing.

If you use Event Viewer, DST can cause unexpected behavior because Event Viewer changes the displayed time (and possibly the date) for events that have already occurred. For example, if an event occurred at 6:00 P.M. in standard time, after you move into DST, that event appears as if it had occurred at 7:00 P.M.

Sometime we believe that the bug has been fixed, however, still see the exception in log event. That's very depressive and confused. But finally, we realize that all these are due to the DST switch. The error truly occured before we did the deployment.

Wish this post could help you.

本文链接

用证书实现windows 2003下IIS的SSL安全通信

2010-05-26T10:24:00Z

Windows 2003 核发自己的 IIS SSL 凭证步骤

有时候开发有关SSL的网页时，需要安装凭证才能够执行，但是开发阶段又不可能去申请个正式凭证来安装(况且申请凭证是要钱的)。在这样的状况下，如果您开发的操作系统是Windows 2003的话，可以安装凭证服务，然后自己核发一份凭证给自己，这样就能够进行相关程序的开发了。

相关的设定过程，小喵整理步骤如下：

设定IIS的SSL
SSL的设定需要有凭证，凭证可以向CA申请 (如 HiTrust 的Verisign SSL ) 或自行建置，以下说明自行建置CA，核发凭证的过程

安装证书颁发机构单位(CA)
因为不想花钱或是只在内部使用的Web 站台，想要使用SSL的功能，就必须自己成为证书颁发机构单位，自己发凭证给自己的网站使用
计算机名称与CA有很大的关连，建议先将计算机名称更改为叫有意义的名字
先想好要IIS中的哪一个站台成为SSL的站台
安装CA的步骤：控制面板/新增或移除程序/新增移除Windows组件/Certificate Services
安装完毕后会在IIS的预设的网站中建立CertSrv,CertControl,CertEnroll等三个虚拟目录

产生凭证要求
开启 IIS 管理员。
在要安装凭证的网站单击鼠标右键，再按内容。 //是网站而不是虚拟目录喔
单击「目录安全设定」索引卷标。
单击服务器证书按钮，按下一步
点选「建立新凭证」，按下一步，点选「准备要求，但于稍后传送」，按下一步
输入凭证名称与密钥位长度，可采默认值即可
输入公司名称及单位，通常是公司与部门的正式名称
输入「一般名称」，此名称十分重要，默认为NetBios的计算机名称(IntraNet上使用)，但若使用在 InterNet上，则必须改用网站的FQDN名称(例如：dcicc.ncit.edu.tw)。 //若网站名称与凭证名称不同，则使用者在浏览时会出现「安全性凭证的名称不正确或与网站的名称不相符」的安全性警告
在「国家/地区」，「省/州」与「城市/位置」字段中输入适当的信息，再按下一步。
输入欲产生的「凭证要求」文件名 (c:\certreq.txt)，再按下一步。
-----BEGIN NEW CERTIFICATE REQUEST-----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-----END NEW CERTIFICATE REQUEST-----
检视凭证要求档案中的摘要，若没有问题再按下一步。
按完成，结束产生「凭证要求档案」的过程

送出凭证要求
将上一个步骤所产生的档案c:\certreq.txt，其内容复制到剪贴簿
开启浏览器，键入「http://HOSTNAME/CertSrv」 //HOSTNAME为CA的计算机名称，若为本机也可设定为127.0.0.1
单击「要求凭证」。
单击「提交进阶凭证要求」。
单击「用 Base-64 编码的 CMC 或 PKCS #10 档案来提交凭证要求，或用 Base-64 编码的 PKCS #7 档案提交更新要求」。
在已储存的要求下方的文本框中，按下Ctrl+V，贴上之前复制的内容，单击「提交」。

颁发证书
控制面板/系统管理工具/证书颁发机构单位
展开后点选「搁置要求」文件夹
点选刚刚提交的凭证要求
点选菜单上的「执行/所有工作/发行」
点选「发出的凭证」文件夹
对刚刚发出的凭证按2下鼠标以检视之
按下「详细数据」的索引卷标，单击「复制到档案」
按下一步，点选汇出的文件格式为「Base-64 Encoded X.509 (.CER)」
输入欲产生的凭证文件名，例如：C:\dcicc.cer
下一步/完成/确定。
在Web Server上安装凭证
开启 IIS 管理员。
在有凭证要求的网站上按下鼠标右键，再按内容。
单击「目录安全设定」索引卷标。
单击服务器证书按钮，按下一步。
点选「处理搁置要求及安装凭证」，再按下一步。
输入CA响应之「证书颁发机构的档案」的路径与名称，可采默认值即可(C:\dcicc.cer)，再按下一步。
输入网站使用的SSL端口，可采默认值443即可。
下一步/完成/确定。
本文链接

5 Whys Quickly Getting to the Root of a Problem

2010-05-11T14:22:00Z

The 5 Whys is a simple problem-solving technique that helps users to get to the root of the problem quickly. Made popular in the 1970s by the Toyota Production System, the 5 Whys strategy involves looking at any problem and asking: "Why?" and "What caused this problem?"

Following is an example of the 5 Whys analysis as an effective problem-solving technique:

Why is our client, Hinson Corp., unhappy? Because we did not deliver our services when we said we would.

Why were we unable to meet the agreed-upon timeline or schedule for delivery? The job took much longer than we thought it would.

Why did it take so much longer? Because we underestimated the complexity of the job.

Why did we underestimate the complexity of the job? Because we made a quick estimate of the time needed to complete it, and did not list the individual stages needed to complete the project.

Why didn't we do this? Because we were running behind on other projects. We clearly need to review our time estimation and specification procedures.

Key Points:

The 5 Whys strategy is an easy and often-effective tool for uncovering the root of a problem. Because it is so elementary in nature, it can be adapted quickly and applied to most any problem. Bear in mind, however, that if it doesn't prompt an intuitive answer, other problem-solving techniques may need to be applied.

本文链接

Outlook 2007 Conflicts With Google Desktop

2010-04-20T03:13:00Z

You could try to remove google desktop add-in in outlook 2007 if you feel the outlook is abnormally slow.

I believe the problem could be credited to the background action by google desktop search.

Update at 20100423, one topic proves my guess.

https://mediawiki.middlebury.edu/wiki/LIS/Google_Desktop_and_Outlook_Issues

Outlook is unresponsive or slow and gives a warning bubble

Message from Outlook: "Microsoft Outlook is Requesting data from the server." or "Trying to retrieve data..."

This can happen if Google Desktop is installed. Here's a brief explanation and some helpful tips: Unfortunately, with large volume of mail, Google Desktop spends more time indexing and re-indexing, and to do this it briefly takes over the connection to the exchange server. this is why Outlook is giving the message.

There is no known solution for this. What helps:

disable other Outlook add-ins (I disabled the iTunes add-in)

install the latest version of Google Desktop

if you need to use outlook for a time and not be bothered by the message, run outlook in safe mode (See Running Outlook in Safe Mode. Note that new messages are not indexed while outlook is in safe mode.

decreasing the number of messages / folder (not necessarily deleting them, but splitting them up in different folders, such that there is less than 1000/folder)

本文链接

博客园_beyondjay

An excellent mockup tool -- Balsamiq

Impression of Team Foundation Server 2010

Impression Of Book – Beautiful Architecture

(翻译)十分钟内安装，配置，使用Windows Server AppFabric

jQuery插件floatIt，浮动div并居中在上方或者下方

some useful links for dealing with blg file and performance analyses

The time zones of Event log

用证书实现windows 2003下IIS的SSL安全通信

Windows 2003 核发自己的 IIS SSL 凭证步骤

设定IIS的SSLSSL的设定需要有凭证，凭证可以向CA申请 (如 HiTrust 的Verisign SSL ) 或自行建置，以下说明自行建置CA，核发凭证的过程

5 Whys Quickly Getting to the Root of a Problem

Outlook 2007 Conflicts With Google Desktop

设定IIS的SSL
SSL的设定需要有凭证，凭证可以向CA申请 (如 HiTrust 的Verisign SSL ) 或自行建置，以下说明自行建置CA，核发凭证的过程