Notes from the team running your stack.
Tech insights, deep dives, and announcements for developers and ops teams on .NET, Windows Server, SQL Server, ASP.NET Core, and the wider web platform.
-
Folder Swap Cutover for .NET 10 on IIS
Shared and VPS IIS hosts rarely offer Azure-style slots. Publish to a sibling folder, smoke-test it, then flip the site physical path for a clean cutover.
-
Parameter Sniffing Fixes for ASP.NET SQL Workloads
One cached plan can make the same ASP.NET query fly or crawl. Spot parameter sniffing on SQL Server and fix it without blanket recompiles.
-
Output Cache for ASP.NET Core 10 APIs on IIS
Cut repeat SQL and CPU on IIS-hosted APIs with ASP.NET Core output cache. Wire policies, vary-by rules, and tag eviction so responses stay fast and correct after recycles.
-
Harden ASP.NET Core Auth Cookies on IIS
Lock down cookie authentication for ASP.NET Core 10 on IIS: Secure, HttpOnly, SameSite, names, and lifetimes. Concrete CookieOptions and hosting notes you can ship.
-
ANCM In-Process vs Out-of-Process on IIS
Choose the right AspNetCoreModuleV2 hosting model for .NET 10 on IIS. In-process wins on latency; out-of-process wins on isolation—here is how to set both.
-
PathBase for ASP.NET Core Under IIS Virtual Apps
ASP.NET Core under an IIS virtual app misbuilds links and cookies unless PathBase is set. Wire middleware and web.config so /api and sub-apps stay correct.
-
IIS App Pool Recycling Without Dropping ASP.NET Requests
Default IIS recycles hit at awkward hours and can cut in-flight work. Schedule quiet-hour recycles, enable overlap, and set shutdown limits so ASP.NET finishes cleanly.
-
GitHub Actions Web Deploy for .NET 10 on IIS
Wire publish and Web Deploy into GitHub Actions so ASP.NET Core 10 hits IIS the same way every push. Covers profiles, safe excludes, and a post-deploy smoke check.
-
SQL Connection Pools and Timeouts on IIS Hosts
Pool exhaustion often surfaces as random SQL timeouts under load. Tune Max Pool Size, Connect Timeout, and CommandTimeout for ASP.NET apps on IIS before traffic spikes.
-
Tune .NET GC for ASP.NET Core App Pools on IIS
Default GC settings can thrash IIS app pools under load. Align heap limits with recycle thresholds so ASP.NET Core 10 stays stable on Windows hosts.
-
Security Headers for ASP.NET Core 10 on IIS
Missing response headers still open clickjacking and MIME sniff paths on hosted ASP.NET sites. Wire HSTS, CSP, and cookie flags once in middleware or web.config.
-
IIS URL Rewrite HTTPS Redirects Without Loops
Force HTTPS and a single host name at the IIS edge without redirect loops. Patterns that play cleanly with ASP.NET Core in-process hosting.
-
HttpClient DNS Refresh for IIS-Hosted .NET Apps
Long-lived IIS worker processes keep outbound sockets past DNS TTLs. Set connection lifetimes so .NET 10 apps pick up endpoint changes without a recycle.
-
Preload ASP.NET Core on IIS to Cut Cold Starts
App pool recycles leave the next visitor paying startup cost. IIS Application Initialization can warm ASP.NET Core before real traffic hits—when the host allows it.
-
app_offline.htm for Clean ASP.NET Core IIS Cutover
Drop app_offline.htm before you overwrite bins on IIS. It stops new requests, reduces file locks, and makes .NET 10 cutovers predictable on Windows hosts.