IIS
73 posts tagged with this.
-
Set .NET Roll-Forward Safely for IIS Hosted Apps
Framework-dependent .NET apps on IIS inherit the host’s shared runtimes. Set rollForward explicitly so patch updates apply without surprise major jumps.
-
Keep IIS Disk Free: Logs, Temp Files, Uploads
ASP.NET apps fill Windows volumes with logs, temp compile output, and uploads. Control paths, retention, and app pool behavior before the host runs out of space.
-
FDD vs Self-Contained for .NET 10 on IIS Hosts
Framework-dependent .NET 10 publishes stay lean on Windows IIS when the host runtime is present. Self-contained bundles the runtime—use it only when you must pin a patch band the server lacks.
-
SQL Deadlock Retries for ASP.NET Core on IIS
Error 1205 becomes a user-facing 500 unless ASP.NET Core retries the unit of work. Enable provider retry, shorten transactions, and cut lock cycles on SQL Server 2022/2025.
-
Health Checks for ASP.NET Core on IIS
Ship liveness and readiness checks that work with IIS in-process hosting. Avoid false downs from cold pools and noisy SQL probes.
-
Patch Discipline for .NET on IIS and SQL Server
Unpatched runtimes beat fancy headers as a breach path. Build a repeatable patch cadence for the Hosting Bundle, IIS, and SQL Server on Windows hosts.
-
Harden Schannel TLS for IIS on Server 2025
Legacy TLS protocols and weak ciphers still linger on IIS hosts. Tighten Schannel on Windows Server 2025 so ASP.NET sites negotiate modern, browser-safe connections.
-
Debug Slow IIS Pages with Failed Request Tracing
Turn on IIS Failed Request Tracing for ASP.NET apps without drowning in logs. Capture slow pages and 500s with tight rules you can leave on shared hosts.
-
Web Deploy Parameters for Multi-Env IIS Hosts
Stop baking secrets into publish output. Use Web Deploy parameters and .pubxml profiles so one .NET 10 package targets staging and production IIS cleanly.
-
Set ASP.NET Core Environment on IIS via web.config
Stop baking Staging vs Production into publish profiles. Set ASPNETCORE_ENVIRONMENT at the IIS layer so one package runs cleanly on Windows hosts.
-
Least Privilege for ASP.NET on IIS and SQL Server
Shrink IIS app pool rights and SQL logins so a compromised ASP.NET site cannot roam the box. Concrete ACL, identity, and T-SQL patterns for production hosts.
-
IIS Request Filtering That Stops Bad Traffic Early
Block hostile URLs, verbs, and extensions at IIS before ASP.NET runs. Practical requestFiltering settings for Windows hosts and .NET apps.
-
Persist Data Protection Keys for ASP.NET Core on IIS
App pool recycles reset in-memory Data Protection keys and break cookies. Persist the key ring outside the site folder so auth and antiforgery survive restarts.
-
32-bit vs 64-bit IIS App Pools for .NET Apps
Pick the right IIS app pool bitness for .NET Framework and .NET 10 apps. Avoid native DLL load failures, address-space traps, and surprise memory pressure.
-
Folder Swaps and Smoke Tests for IIS .NET Deploys
Ship ASP.NET Core 10 to IIS with a staging folder, brief app_offline window, and a post-swap smoke check. Safer cutovers on shared and Windows VPS hosts without cloud slots.