Server for ASP.NET

For a project I would like to use ASP.NET because I find it very more confortable than JavaEE, and more professionnal and structured than PHP.

It's for a big project so we will have a dedicated server, so I must think to the installation and security, ...

I've some knowledge about administrating a server under linux. But nothing under windows.

So I'm here to have some feedback:
-Is it a windows server secure?
-What we must think specially under windows server
-A other possibility is to use mono, right? But what about? It's very developped? What we cannot have? Can we really use it in a professionnal project?


Thanks!
LVL 1
NargzulAsked:
Who is Participating?
 
tigermattConnect With a Mentor Commented:

> Is it a windows server secure?

Most certainly. There is a general 'feel' in the IT industry that Linux/Unix-based systems are inherently more secure than Windows. To an extent, these rumours are true, but Microsoft are probably one of the most responsive companies to release patches for bugs the moment they are found. No Operating System is 100% flawless; both *nix and Windows systems will have flaws.

> What we must think specially under windows server

Like any system, you must ensure it is installed as per the best practices and kept patched. This means running Windows Update on a regular basis, or deploying a local WSUS server on your network if you have a large number of servers to patch.

When configuring any form of network/server appliance, you should remember the principle of only giving users as many permissions as they need. Never log into the server as an Administrative user unless you NEED to. Most operations can be performed under the credentials of a standard user, elevating automatically to an Admin user only when necessary.

> A other possibility is to use mono, right? But what about? It's very developped? What we cannot have? Can we really use it in a professionnal project?

For a professional project, I would MUCH rather use the official, supported platform by installing and running directly from IIS. Using third-party implementations cannot guarantee urgent security patches will be implemented as soon as they are released, potentially putting mission-critical business operations running on the server at risk.

-Matt
0
 
NargzulAuthor Commented:
To update a windows server, must we reboot it?
0
 
tigermattCommented:

It depends on what update is being applied. A lot of updates can be applied without requiring a reboot. There are some updates which update locked system files, and that does require a reboot.

If an update requires an update, we do the reboot out-of-hours. It is also worth considering that, when an update is required, creating a scheduled task to restart the server at 3am in the morning works very well, and the 5 - 10 minute downtime at that time of day will not generally be noticed.

-Matt
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
NargzulAuthor Commented:
The problem is that our server will have to roles:
1. Receive request from client(in the day)
2. Send data from client to nodes(multimedia contents, 14To/night is our goal),

So every hour is critical :S
0
 
tigermattCommented:

You would need to schedule downtime and this would need to be taken into account by your application developers. If you are properly patching any server, it cannot run 24/7/365 without some downtime, whether it is to install patches, software installation or to perform hardware maintenance.

If it is that important you cannot afford even 5 minutes of downtime, you would want to look at setting up clustering, either a server cluster or a NLB cluster. This will ensure high availability, but requires you to have 2 server instances, 2 licenses, and for a server cluster - Windows Server 2003/2008 Enterprise Edition.

-Matt
0
 
NargzulAuthor Commented:
We got a linux server, he has never been shutdown since her installation(2 years ago).
0
 
tigermattCommented:

Windows servers are different. They are VERY reliable if installed and configured properly on the correct server-type hardware, but you must patch the server which occasionally requires a restart. That's just the nature of any server.

I suspect your Linux server should be patched in a similar fashion, and a restart every few months can be beneficial.

-Matt
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.