Notes from the team running your stack.
Tech insights, deep dives, and announcements for developers and ops teams on .NET, Windows Server, SQL Server, ASP.NET Core, and the wider web platform.
-
Least Privilege for ASP.NET on IIS and SQL Server
Shrink IIS app pool rights and SQL logins so a compromised ASP.NET site cannot roam the box. Concrete ACL, identity, and T-SQL patterns for production hosts.
-
IIS Request Filtering That Stops Bad Traffic Early
Block hostile URLs, verbs, and extensions at IIS before ASP.NET runs. Practical requestFiltering settings for Windows hosts and .NET apps.
-
Persist Data Protection Keys for ASP.NET Core on IIS
App pool recycles reset in-memory Data Protection keys and break cookies. Persist the key ring outside the site folder so auth and antiforgery survive restarts.
-
32-bit vs 64-bit IIS App Pools for .NET Apps
Pick the right IIS app pool bitness for .NET Framework and .NET 10 apps. Avoid native DLL load failures, address-space traps, and surprise memory pressure.
-
Folder Swaps and Smoke Tests for IIS .NET Deploys
Ship ASP.NET Core 10 to IIS with a staging folder, brief app_offline window, and a post-swap smoke check. Safer cutovers on shared and Windows VPS hosts without cloud slots.
-
SQL Server Restore Checklist for ASP.NET Apps
Bad cutovers and orphaned logins break restores more often than corrupt backups. Use this SQL Server checklist before you point ASP.NET back at production.
-
IIS SNI Certificate Bindings on Windows Server 2025
SNI lets one IIS IP serve many HTTPS hostnames with separate certificates. Bind and rotate certs on Windows Server 2025 without knocking other sites offline.
-
ASP.NET Core 10 on IIS: In-Process Hosting Checklist
Ship ASP.NET Core 10 on IIS without 502.5 surprises. App pool, ANCM, Web.config, and SQL connection settings that actually matter on Windows hosts.
-
App Pool Recycling That Won't Wake You at 3 AM
Bad IIS app pool defaults cause more ASP.NET outages than flaky deploys. Tune recycling, bitness, and Full Trust for stable Windows shared hosting.
-
Deploy .NET 10 to IIS with Web Deploy and CI
Ship ASP.NET Core apps to Windows IIS with Web Deploy, CI publish, config transforms, and post-deploy smoke checks. Practical patterns for shared and VPS hosts.
-
SQL Timeouts and Pooling for Hosted ASP.NET Apps
Most ASP.NET SQL timeouts on Windows hosting are pool exhaustion or bad plans, not a dead engine. Fix connection strings, timeouts, indexes, and EF Core habits.
-
Graceful Shutdowns for ASP.NET Core on IIS
IIS recycles app pools on a schedule, after idle time, or on config changes. Hook ASP.NET Core lifetime events so in-flight work finishes and SQL connections close cleanly.
-
Harden ASP.NET on IIS: Headers, Cookies, Secrets
Most hosted ASP.NET breaches start with missing headers, weak cookies, and secrets in Web.config. Harden IIS and .NET 10 apps with concrete config you can ship today.
-
IIS URL Rewrite Rules That Survive ASP.NET Core Publish
Keep HTTPS, host, and path rules intact when ASP.NET Core overwrites web.config. Practical IIS Rewrite patterns for Windows shared and VPS hosts.
-
ASP.NET Core 10: IIS Application Initialization
App pool recycles still cold-start ASP.NET Core on IIS. Use Application Initialization plus a warmup path so .NET 10 apps stay responsive after recycle.