Web331 IIS7,面向未来的Web服务器

课程内容概述 正在开发中的IIS7是一套面向未来的Web服务器平台，它将使得Web应用的开发、部署和管理变得前所未有的简单和灵活。在这个讲座中，我们会展示IIS 7中所有关键的新特性，演示如何进行IIS内核级别的自定义开发和基本的排错诊断思路。同时，我们也会介绍微软如何在IIS7上运营Microsoft.com这个世界上最大的网站。

课程内容安排 Software as a service对Web服务器平台的需求 IIS7新特性介绍 IIS7自定义和应用开发 Microsoft.com @ IIS7 http://www.iis.net/default.aspx?tabid=7&subtabid=78

IIS问答 有多少人用过IIS？ 有多少人做过Web相关的开发工作？ 有多少人做过IIS的服务器功能扩展(ISAPI)？ 有多少人小时候玩过积木？

Software as a service 对Web服务器平台的需求 11/7/2018 11:16 PM Software as a service 对Web服务器平台的需求 5 © 2006 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Microsoft Platform Software

什么是Software as a Service? MGB 2003 什么是Software as a Service? Microsoft Live Salesforce.com Microsoft Hotmail Microsoft SharePoint® Basecamp … Salesforce.com of course Hotmail, PayPal, It is difficult to achieve economies-of scale unless the application is nearly identical across most companies – like payroll or e-mail. A Web service… a megaservice SaaS and Grid © 2006 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

SaaS对Web服务器的需求 Web服务器必须是一个可靠的平台 高度的可靠性 性能伸缩能力 大规模的自定义和二次开发 安全，安全，安全！

11/7/2018 11:16 PM IIS7 新特性介绍 9 © 2006 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

关键特性 全新的Web服务器平台 模块化的架构 超强的可扩展性 统一的配置管理模式 高效的管理工具 强有力的诊断和纠错工具 将存在于Windows Vista和Windows Longhorn Server中 模块化的架构 超强的可扩展性 统一的配置管理模式 高效的管理工具 强有力的诊断和纠错工具 Modular Architecture: IIS7 is designed to enable the IT professional to customize exactly which features are installed and running on the Web server. IIS is now factored into more than 40 feature modules that can be independently installed on the box, dramatically reducing the potential attack surface, and lowering the footprint requirements on the machine. Comprehensive Extensibility: IIS7 enables developers to extend the Web server in a seamless way. IIS7 own core web server features are now built using a new set of public Web server APIs that all developers can use to extend, replace or add functionality to the web server. These APIs are available as both native Win32 APIs as well as managed .NET Framework APIs. Developers can also take advantage of IIS7’s extensibility of event logging, configuration, and administration tool feature-sets, providing a seamless experience for customers using third party extensions. Unified, Distributable Configuration Model: IIS7 provides developers and administrators a unified configuration system for storing all IIS and ASP.NET settings in a single XML format and includes a set of managed code and scripting APIs for accessing configuration for the entire Web platform. This new configuration system supports distributed configuration files, which can be stored along with Web site or application content. These improvements have radical implications for how applications are configured and deployed. Now that Web site and application settings are no longer explicitly tied to a centralized configuration store on the machine, configuration can simply be copied from the developer’s workstation, to a test server, and on to the production Web server. Once a Web site is in production, administrators can share configuration information across multiple front-end Web servers, avoiding costly and error-prone replication and manual synchronization issues. Efficient Administration Tools: IIS7 offers a broad set of administration features that simplify the day-to-day tasks of managing Web sites and applications. IIS7 includes a new GUI admin tool, a new command line utility, a new managed API, and a new WMI provider for automating administration tasks. All of these new administration features provide unified support for managing both IIS and ASP.NET settings together. IIS7’s new GUI admin tool offers a new, more efficient tool for managing the Web server. It provides support for both IIS and ASP.NET configuration settings, membership users and role data, as well as runtime diagnostic information. The new UI also enables those who host or administer Web sites to delegate administrative control to developers or content owners, thus reducing cost of ownership and administrative burden for the IT Professional. It supports connecting to remote servers over HTTP (so through firewalls), and works in both dedicated and shared hosting environments. Powerful Diagnostic Capabilities: IIS7 enables developers and IT Professionals to more easily troubleshoot errant Web sites and applications. IIS7 exposes runtime diagnostic information to administrators (for example: what requests are currently executing, how long they’ve been running, which urls they are invoking, what client called them, and what their status is). IIS7 can also be configured to automatically log detailed trace events for requests when failures are detected. These diagnostic capabilities in IIS7 are extensible as well, so new diagnostic events can be inserted into custom modules.

模块化的威力 可以仅安装、管理和监控你需要的模块 降低攻击面 降低内存开销 更容易的控制 更可以做到： 11/7/2018 11:16 PM 模块化的威力 可以仅安装、管理和监控你需要的模块 降低攻击面 降低内存开销 更容易的控制 更可以做到： …用自定义开发的模块替换默认组件，打造属于你自己的IIS… © 2006 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

IIS 6.0 中对ASP.NET的集成 通过ISAPI扩展实现ASP.NET的功能 仅能处理针对ASP.NET的相关请求。 运行时的局限 11/7/2018 11:16 PM IIS 6.0 中对ASP.NET的集成 通过ISAPI扩展实现ASP.NET的功能 仅能处理针对ASP.NET的相关请求。 运行时的局限 ISAPI 顺序 重复的功能 认证 请求映射 自定义出错信息 ©2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

IIS7 中对ASP.NET的集成 两种模式 集成模式 ISAPI (兼容) 集成到IIS中 .NET相关的功能直接融入到IIS核心中 11/7/2018 11:16 PM IIS7 中对ASP.NET的集成 两种模式 ISAPI (兼容) 集成到IIS中 集成模式 .NET相关的功能直接融入到IIS核心中 所有的请求可以被统一处理 一致的运行时(runtime) ©2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

IIS7 的可扩展性 服务器核心 (Core Server) 配置 IIS 管理器 (用户界面) 诊断 11/7/2018 11:16 PM IIS7 的可扩展性 服务器核心 (Core Server) IIS开发采用Win32 API作为开发接口 所有的IIS模块都使用一致的开发接口 不同于以前的ISAPI,新版IIS全部采用公开的API接口 对ASP.NET 2.0的全面支持 iHttpModule接口 ASP.NET 2.0事件处理器(Event Handlers) 配置 使用XML文件来帮助配置和扩展 IIS 管理器 (用户界面) 使用.NET 2.0开发, 可已根据要求进行功能扩充 诊断 在理流程中插入自定义开发的诊断模块 © 2006 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

IIS7 的可扩展性(续) 公开和可扩充的模块 实现功能 DLL容器 C++ API和类库 全面的扩充能力 简单而且强壮的代码 16 11/7/2018 11:16 PM IIS7 的可扩展性(续) 公开和可扩充的模块 DLL容器 C++ API和类库 实现功能 全面的扩充能力 简单而且强壮的代码 16 © 2006 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

完成服务器扩展的主要APIs 对象模型 托管接口 (Managed ASP.NET APIs) Win32 API 请求监听和过滤: 11/7/2018 11:16 PM 完成服务器扩展的主要APIs 对象模型 请求监听和过滤: IHttpRequest, IHttpResponse, IHttpUser, IHttpConnection 服务器端容器: IHttpSite, IHttpApplication, IHttpServer 事件响应模块: Authentication, determine handler, send response, etc. 服务器工具集: Caching, file operations, logging, tracing, perf counters, application management, etc 托管接口 (Managed ASP.NET APIs) 使用标准的ASP.NET对象模型 Win32 API Httpserv.h © 2006 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

IIS7自定义模块和ISAPI扩展的区别 更强大 易于编写而且代码非常强壮 容易管理 更丰富的API 事件通知的颗粒度更加细化 C++ 11/7/2018 11:16 PM IIS7自定义模块和ISAPI扩展的区别 更强大 更丰富的API 事件通知的颗粒度更加细化 易于编写而且代码非常强壮 C++ 核心模式的简化 容易管理 对所有服务器功能进行一致的管理 细化功能的开启和关闭 18 © 2006 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

IIS7中全新的配置管理体验 统一的管理模型 灵活的权限代理 方便的编程接口 向metabase说再见 11/7/2018 11:16 PM IIS7中全新的配置管理体验 统一的管理模型 向metabase说再见 基于XML的配置信息文件(ApplicationHost.config) 灵活的权限代理 方便的编程接口 Delegation of config settings to Developers XCopy deployment of configuration along with content Single configuration API for the entire Web Platform Clean, well schematized configuration files Rich extensibility IIS 7.0 Beta: XML-Based Configuration Files IIS 7.0 configuration files, named ApplicationHost.config, contain XML-encoded data with containment logic that is consistent throughout the settings schema. Configuration elements that contain settings for features as diverse as application pools, server bindings, custom-error mapping, and application debugging are all specified using the same containment structure and XML language. Whether you use graphical tools or scripts, the IIS settings schema makes configuration data easy to navigate, parse, and set accurately. Because the same logic applies to settings from the server level down to the file level, you need to understand only one XML-based settings scheme to set any element at any level. For example, suppose you wanted to set Windows authentication. You can set the same elements and attributes for Windows authentication at any of the following configuration levels using the same tools: • On the Web server (in the ApplicationHost.config file) • On an application root virtual directory (on a root-level Web.config file) • Or at any level in an ASP.NET application (in an application-level Web.config file) For detailed information on IIS 7.0 configuration files and the organization of configuration data, see the topics under IIS 7.0 Beta: Configuration Hierarchy . © 2006 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

ApplicationHost.config 11/7/2018 11:16 PM 配置管理和权限委派图解 Windows Vista & IIS 7 Website 1 Root web.config 站点管理员 Website 2 Root web.config Application 1 Root web.config ApplicationHost.config Application 2 Root 应用程序 管理员 web.config © 2006 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

管理您的IIS7 新的用户界面 – IIS管理器 完全重新开发的WMI Provider 下一代的命令行管理工具:AppCmd 11/7/2018 11:16 PM 管理您的IIS7 新的用户界面 – IIS管理器 完全重新开发的WMI Provider 下一代的命令行管理工具:AppCmd 与IIS 6.0 ADSI & WMI的全面兼容 © 2006 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

11/7/2018 11:16 PM 管理您的IIS7：管理器界面 © 2006 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

11/7/2018 11:16 PM 管理您的IIS7：WMI接口 Set oService = GetObject("winmgmts:root\WebAdministration") ' Create binding for site Set oBinding = oService.Get("BindingElement").SpawnInstance_ oBinding.BindingInformation = "*:80:www.site.com" oBinding.Protocol = "http" ' Create site oService.Get("Site").Create _ "NewSite", array(oBinding), "C:\inetpub\wwwroot" ' Create application oService.Get("Application").Create _ "/foo", "NewSite", "C:\inetpub\wwwroot\foo” © 2006 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

管理您的IIS7-小结 使用IIS管理器进行站点和应用的权限委派 可用基于HTTPs的远程管理 支持Windows和非Windows身份 11/7/2018 11:16 PM 管理您的IIS7-小结 使用IIS管理器进行站点和应用的权限委派 可用基于HTTPs的远程管理 支持Windows和非Windows身份 AppCmd.exe提供了对新的配置特性的直接访问 IIS管理器和WMI都可以进行全方位的扩充 全面兼容对metabase的支持提供 © 2006 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

11/7/2018 11:16 PM IIS 7.0自定义和应用开发 25 © 2006 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

用C++还是.NET? .NET: 简单明了 C++: 深度和精度 几乎可以完成所有的二次开发要求 11/7/2018 11:16 PM 用C++还是.NET? .NET: 简单明了 几乎可以完成所有的二次开发要求 多语言RAD和.NET Framework 丰富的ASP.NET APIs C++: 深度和精度 能够更好的控制系统 更高的性能 应对跨进程等特殊情况 ©2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

二次开发案例演示

Microsoft.com @ IIS7 11/7/2018 11:16 PM 28 © 2006 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Microsoft.com网站的历史 2001 2003 1995 2006 4M 用户/天 6.5M 用户/天 30k 用户/天 11/7/2018 11:16 PM Microsoft.com网站的历史 2001 4M 用户/天 2003 6.5M 用户/天 1995 30k 用户/天 2006 17.1M 用户/天 © 2006 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

微软的Dog-fooding战术 为开发中的产品提供反馈信息 在用户之前发现Bugs 积累微软技术的应用案例(MS IT Showcase) 11/7/2018 11:16 PM 微软的Dog-fooding战术 为开发中的产品提供反馈信息 网站运营小组跟产品开发部门之间紧密地合作关系 针对预发布版, 内部稳定工程版本进行大范围的生产环境测试 在用户之前发现Bugs Microsoft Windows Vista Beta 2，记录了40个以上的Bug Windows Server “Longhorn”，记录了4个DCR 积累微软技术的应用案例(MS IT Showcase) 为日后客户的部署提供经验和最佳实践 http://www.microsoft.com/technet/itsolutions/msit/default.mspx DCR=Design Change Request 30 © 2006 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

i n t e r n e t i n f o r m at i o n s e r v i c e s s e v e n 时间允许的话，请听众说出IIS7的7个特点，给礼物。

IIS.net slide