?
Solved

Server for ASP.NET

Posted on 2009-04-30
7
Medium Priority
?
551 Views
Last Modified: 2016-03-02
For a project I would like to use ASP.NET because I find it very more confortable than JavaEE, and more professionnal and structured than PHP.

It's for a big project so we will have a dedicated server, so I must think to the installation and security, ...

I've some knowledge about administrating a server under linux. But nothing under windows.

So I'm here to have some feedback:
-Is it a windows server secure?
-What we must think specially under windows server
-A other possibility is to use mono, right? But what about? It's very developped? What we cannot have? Can we really use it in a professionnal project?


Thanks!
0
Comment
Question by:Nargzul
  • 4
  • 3
7 Comments
 
LVL 58

Accepted Solution

by:
tigermatt earned 2000 total points
ID: 24272370

> Is it a windows server secure?

Most certainly. There is a general 'feel' in the IT industry that Linux/Unix-based systems are inherently more secure than Windows. To an extent, these rumours are true, but Microsoft are probably one of the most responsive companies to release patches for bugs the moment they are found. No Operating System is 100% flawless; both *nix and Windows systems will have flaws.

> What we must think specially under windows server

Like any system, you must ensure it is installed as per the best practices and kept patched. This means running Windows Update on a regular basis, or deploying a local WSUS server on your network if you have a large number of servers to patch.

When configuring any form of network/server appliance, you should remember the principle of only giving users as many permissions as they need. Never log into the server as an Administrative user unless you NEED to. Most operations can be performed under the credentials of a standard user, elevating automatically to an Admin user only when necessary.

> A other possibility is to use mono, right? But what about? It's very developped? What we cannot have? Can we really use it in a professionnal project?

For a professional project, I would MUCH rather use the official, supported platform by installing and running directly from IIS. Using third-party implementations cannot guarantee urgent security patches will be implemented as soon as they are released, potentially putting mission-critical business operations running on the server at risk.

-Matt
0
 
LVL 1

Author Comment

by:Nargzul
ID: 24277618
To update a windows server, must we reboot it?
0
 
LVL 58

Expert Comment

by:tigermatt
ID: 24280835

It depends on what update is being applied. A lot of updates can be applied without requiring a reboot. There are some updates which update locked system files, and that does require a reboot.

If an update requires an update, we do the reboot out-of-hours. It is also worth considering that, when an update is required, creating a scheduled task to restart the server at 3am in the morning works very well, and the 5 - 10 minute downtime at that time of day will not generally be noticed.

-Matt
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
LVL 1

Author Comment

by:Nargzul
ID: 24283760
The problem is that our server will have to roles:
1. Receive request from client(in the day)
2. Send data from client to nodes(multimedia contents, 14To/night is our goal),

So every hour is critical :S
0
 
LVL 58

Expert Comment

by:tigermatt
ID: 24286041

You would need to schedule downtime and this would need to be taken into account by your application developers. If you are properly patching any server, it cannot run 24/7/365 without some downtime, whether it is to install patches, software installation or to perform hardware maintenance.

If it is that important you cannot afford even 5 minutes of downtime, you would want to look at setting up clustering, either a server cluster or a NLB cluster. This will ensure high availability, but requires you to have 2 server instances, 2 licenses, and for a server cluster - Windows Server 2003/2008 Enterprise Edition.

-Matt
0
 
LVL 1

Author Comment

by:Nargzul
ID: 24286724
We got a linux server, he has never been shutdown since her installation(2 years ago).
0
 
LVL 58

Expert Comment

by:tigermatt
ID: 24286745

Windows servers are different. They are VERY reliable if installed and configured properly on the correct server-type hardware, but you must patch the server which occasionally requires a restart. That's just the nature of any server.

I suspect your Linux server should be patched in a similar fashion, and a restart every few months can be beneficial.

-Matt
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

OfficeMate Freezes on login or does not load after login credentials are input.
Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…
Suggested Courses

807 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question