Tag

Windows Server

43 posts tagged with this.

  1. Official Blog
    · 4 min read

    IIS URL Rewrite HTTPS Redirects Without Loops

    Force HTTPS and a single host name at the IIS edge without redirect loops. Patterns that play cleanly with ASP.NET Core in-process hosting.

  2. Official Blog
    · 4 min read

    Safe File Uploads for ASP.NET Core on IIS

    Stop treating uploads as trusted input. Validate type and size in ASP.NET Core, constrain IIS limits, and keep files outside the web root on Windows hosts.

  3. Official Blog
    · 4 min read

    Lock web.config Sections with IIS Feature Delegation

    Stop risky site-level overrides before they hit the worker process. Use IIS Feature Delegation and PowerShell to lock the sections that matter on Windows Server 2025 hosts.

  4. Official Blog
    · 3 min read

    Set .NET Roll-Forward Safely for IIS Hosted Apps

    Framework-dependent .NET apps on IIS inherit the host’s shared runtimes. Set rollForward explicitly so patch updates apply without surprise major jumps.

  5. Official Blog
    · 4 min read

    Keep IIS Disk Free: Logs, Temp Files, Uploads

    ASP.NET apps fill Windows volumes with logs, temp compile output, and uploads. Control paths, retention, and app pool behavior before the host runs out of space.

  6. Official Blog
    · 4 min read

    Harden Schannel TLS for IIS on Server 2025

    Legacy TLS protocols and weak ciphers still linger on IIS hosts. Tighten Schannel on Windows Server 2025 so ASP.NET sites negotiate modern, browser-safe connections.

  7. Official Blog
    · 4 min read

    Debug Slow IIS Pages with Failed Request Tracing

    Turn on IIS Failed Request Tracing for ASP.NET apps without drowning in logs. Capture slow pages and 500s with tight rules you can leave on shared hosts.

  8. Official Blog
    · 3 min read

    Set ASP.NET Core Environment on IIS via web.config

    Stop baking Staging vs Production into publish profiles. Set ASPNETCORE_ENVIRONMENT at the IIS layer so one package runs cleanly on Windows hosts.

  9. Official Blog
    · 5 min read

    Least Privilege for ASP.NET on IIS and SQL Server

    Shrink IIS app pool rights and SQL logins so a compromised ASP.NET site cannot roam the box. Concrete ACL, identity, and T-SQL patterns for production hosts.

  10. Official Blog
    · 4 min read

    IIS Request Filtering That Stops Bad Traffic Early

    Block hostile URLs, verbs, and extensions at IIS before ASP.NET runs. Practical requestFiltering settings for Windows hosts and .NET apps.

  11. Official Blog
    · 4 min read

    32-bit vs 64-bit IIS App Pools for .NET Apps

    Pick the right IIS app pool bitness for .NET Framework and .NET 10 apps. Avoid native DLL load failures, address-space traps, and surprise memory pressure.

  12. Official Blog
    · 4 min read

    IIS SNI Certificate Bindings on Windows Server 2025

    SNI lets one IIS IP serve many HTTPS hostnames with separate certificates. Bind and rotate certs on Windows Server 2025 without knocking other sites offline.

  13. Official Blog
    · 3 min read

    Graceful Shutdowns for ASP.NET Core on IIS

    IIS recycles app pools on a schedule, after idle time, or on config changes. Hook ASP.NET Core lifetime events so in-flight work finishes and SQL connections close cleanly.

  14. Official Blog
    · 3 min read

    IIS URL Rewrite Rules That Survive ASP.NET Core Publish

    Keep HTTPS, host, and path rules intact when ASP.NET Core overwrites web.config. Practical IIS Rewrite patterns for Windows shared and VPS hosts.

  15. Official Blog
    · 4 min read

    ASP.NET Core 10: IIS Application Initialization

    App pool recycles still cold-start ASP.NET Core on IIS. Use Application Initialization plus a warmup path so .NET 10 apps stay responsive after recycle.