Windows Server
43 posts tagged with this.
-
IIS URL Rewrite HTTPS Redirects Without Loops
Force HTTPS and a single host name at the IIS edge without redirect loops. Patterns that play cleanly with ASP.NET Core in-process hosting.
-
Safe File Uploads for ASP.NET Core on IIS
Stop treating uploads as trusted input. Validate type and size in ASP.NET Core, constrain IIS limits, and keep files outside the web root on Windows hosts.
-
Lock web.config Sections with IIS Feature Delegation
Stop risky site-level overrides before they hit the worker process. Use IIS Feature Delegation and PowerShell to lock the sections that matter on Windows Server 2025 hosts.
-
Set .NET Roll-Forward Safely for IIS Hosted Apps
Framework-dependent .NET apps on IIS inherit the host’s shared runtimes. Set rollForward explicitly so patch updates apply without surprise major jumps.
-
Keep IIS Disk Free: Logs, Temp Files, Uploads
ASP.NET apps fill Windows volumes with logs, temp compile output, and uploads. Control paths, retention, and app pool behavior before the host runs out of space.
-
Harden Schannel TLS for IIS on Server 2025
Legacy TLS protocols and weak ciphers still linger on IIS hosts. Tighten Schannel on Windows Server 2025 so ASP.NET sites negotiate modern, browser-safe connections.
-
Debug Slow IIS Pages with Failed Request Tracing
Turn on IIS Failed Request Tracing for ASP.NET apps without drowning in logs. Capture slow pages and 500s with tight rules you can leave on shared hosts.
-
Set ASP.NET Core Environment on IIS via web.config
Stop baking Staging vs Production into publish profiles. Set ASPNETCORE_ENVIRONMENT at the IIS layer so one package runs cleanly on Windows hosts.
-
Least Privilege for ASP.NET on IIS and SQL Server
Shrink IIS app pool rights and SQL logins so a compromised ASP.NET site cannot roam the box. Concrete ACL, identity, and T-SQL patterns for production hosts.
-
IIS Request Filtering That Stops Bad Traffic Early
Block hostile URLs, verbs, and extensions at IIS before ASP.NET runs. Practical requestFiltering settings for Windows hosts and .NET apps.
-
32-bit vs 64-bit IIS App Pools for .NET Apps
Pick the right IIS app pool bitness for .NET Framework and .NET 10 apps. Avoid native DLL load failures, address-space traps, and surprise memory pressure.
-
IIS SNI Certificate Bindings on Windows Server 2025
SNI lets one IIS IP serve many HTTPS hostnames with separate certificates. Bind and rotate certs on Windows Server 2025 without knocking other sites offline.
-
Graceful Shutdowns for ASP.NET Core on IIS
IIS recycles app pools on a schedule, after idle time, or on config changes. Hook ASP.NET Core lifetime events so in-flight work finishes and SQL connections close cleanly.
-
IIS URL Rewrite Rules That Survive ASP.NET Core Publish
Keep HTTPS, host, and path rules intact when ASP.NET Core overwrites web.config. Practical IIS Rewrite patterns for Windows shared and VPS hosts.
-
ASP.NET Core 10: IIS Application Initialization
App pool recycles still cold-start ASP.NET Core on IIS. Use Application Initialization plus a warmup path so .NET 10 apps stay responsive after recycle.