I have had experience with COM+ technology so far to build 3-tier applications. This is huge and advanced technology which supports many interesting concepts. It just works as it should for the applications which operate on LAN.
Now I am planning to build 3-tier system, still based on D7. The difference is that it should work in the internet. The clients will be scattered all over the world. From my experience in such situation I wouldn't rely on com+. Com+ basically needs stable connection, it is not easy to configure the firewall server which has to open quite wide range of ports (even if you narrow it).
So the question is. What architecture (web services, services or something else) works for you in production? I think I would like to have the service which listens on one tcp port. In which I could save session client parameters available for the open session. Also some kind of built in encryption would be a plus.
Thanks for help!