1. April-June 2006 Windows Hosting Seminar Series Product Roadmap: IIS 7.0 Matthew Boettcher Web Platform Technical Evangelist (Hosting) Developer & Platform Evangelism Division (DPE) Europe, Middle East, and Africa Region (EMEA) matthewb@microsoft.com

2. Product History 1996 - V1 ships with WindowsNT 4.0 V2 & V3 releases came in follow-up SP releases 1997 – V4 part of NT 4 Option Pack 2000 – V5 installed by default in Windows 2000 2003 – V6 released in Windows Server 2003 2007 – V7 to be released in “Longhorn” Server

3. IIS 6.0 Today Secure by Default IIS no longer installed by default with OS IIS installs with “locked down” configuration Runs with minimal permissions, secure configuration Secure by Design Extensive design & code reviews Penetration testing Defense in depth Process architecture design for application failure Health detection Automatic recycling of applications Result: Zero critical security patches since release. #1 in reliability for major internet sites.

4. Internet Information Services (IIS) 7.0 Key Benefits for Hosting Extensibility: Flexible extensibility model for powerful customization Scalability: Increased density in terms of Web sites hosted per Web server Administration Tool: All new delegated administration Diagnostics: Rich troubleshooting tools and diagnostic information

5. IIS7: a next generation web application platform. Componentized server Reduce memory footprint and attack surface area Specialize the server Plug features in and out after deployment Unified request processing pipeline across ASP.NET and IIS All services can apply to all content types Single place to manage each feature Rich extensibility model Powerful and easy extensibility APIs Extend the server with native or managed components

6. IIS6 Architecture Refresher w3svc http.sys iiscore cgistaticfileIsapiexts handlers Pre-proc headers auth’c req url map log End net session ISAPI Filter Notifications aspnet_isapi.dll IHttpModule Events url map begin req auth’c req auth’z req resolve cache handler map handler exec update req cache rel req state end req IHttpHandlersTrace.axdPageHandler Server is monolithic: cant extend core features cant remove core features cant add features Feature duplication between IIS and ASP.NET. Features limited due to position in pipeline. ASP.NET functionality not applied to IIS content types. w3wp.exe custom errors authentication logging compression determine handler

7. IIS7 Architecture w3svc http.sys iiscore cgistaticfileIsapiexts Determinehandler Determine handler handlers Pre-proc headers auth’c req url map log End net session Isapi filter notifications aspnet_isapi IHttpModule Events url map begin req auth’c req auth’z req resolve cache handler map handler exec update req cache rel req state end req IHttpHandlersTrace.axd*.aspx Integrated pipeline begin authenticate authorize resolve cache map handler acquire state pre-execute handler execute handler release state update cache log end forms auth windows auth digest auth basic auth IHttpModule Native or Managed Handlers *.aspxtrace.axd Managed IHttpHandler isapi ext static file Native Module other native modules other managed modules role mgr url auth’z Unified request processing pipeline. All services provided by self- contained modules Modules can be managed or native All services can apply to all requests Native Handler

8. Highlights Server = modular components (44+) Customize the server Reduce attack surface area Reduce memory footprint Replace IIS7 components with own or third party Specialize server workload (edge server, load balancer, etc) Gain control of the server Enable and disable features while server is running Enable and disable features for each application I can modify the server out of band Add new features from Microsoft or third party

9. Extensibility and Scalability Customization tools for your service offerings Enable granularity of specific features Facilitate reduction of support and administration issues Modular core server built on public extensibility APIs Building block architecture where core features can be added and removed Configurable server workload with reduced attack surface Choose to install only required modules Easy-to-use server farm configuration and management features Use the administration tool to manage thousands of sites

10. Administration Tool and Diagnostics Consistent set of management tools IIS and ASP.NET integrated together Security set in one place Administration tool that supports hosting scenarios Enable delegated management on a per-site/per-application basis Admin account on remote server not required for tool access In real time, view the currently executing requests See which customer request is taking the CPU to 100% Easily see the state of all Sites, AppPools, and Apps Example: Are there any failed application pools on this machine? Example: What applications are currently active?

11. Summary With IIS 7.0, hosting partners gain: Tremendous extensibility, flexibility, and customization An integrated Web application server stack Compatibility with existing applications Bullet-proof reliability For more information regarding IIS 7.0: IIS 7.0 Software Development Kit available via MSDN Library IIS 7.0 Operations Guide & Feature Reference available via TechNet Windows Server TechCenter

12. Matthew Boettcher Web Platform Technical Evangelist (Hosting) Developer & Platform Evangelism Division (DPE) Europe, Middle East, and Africa Region (EMEA) matthewb@microsoft.com

13. © 2006 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.