IIS optimization for the Web to reduce the burden

Source: Internet
Author: User
Tags access aliyun analysis application asp bandwidth button click

Intermediary trading http://www.aliyun.com/zixun/aggregation/6858.html"> SEO diagnostic Taobao customer hosting technology hall

1, prohibit the extra Web service extensions

IIS6.0 supports a variety of service extensions, some administrators are lazy or do not ask for solutions, worry about the analysis of errors in the Web operation, simply opened all the Web service extensions. As everyone knows, some of these extensions such as "all unknown CGI extensions", "server-side include files" and so on are not essential to the operation of the Web, but also affect the performance of IIS resources occupy the Web, even some extensions loopholes Easier to be exploited by attackers. Therefore, the scientific principle is what extensions are enabled with what extensions.

If the corporate site is a static page, then do not expand any expansion. But now the corporate site is interactive dynamic pages such as asp, php, jsp and so on. If it is asp page, then just open "Active Server Pages" can be. For php, jsp and other dynamic pages IIS6.0 default is not supported by the need to install the appropriate components to achieve these extensions support. However, this extension can not be disabled at this time.

Forbid Web service expansion operation is very simple, open "IIS Manager" in the left pane, click on the "Web Services Extensions" on the right select the appropriate extension, and then click "disable" button. (figure 1)

2, delete unnecessary IIS extension mapping

IIS default support. Asp,. Cdx and other eight kinds of extensions of the mapping, which in addition to. Spread other extensions almost useless. These unnecessary extensions will increase the burden on the web server, but also bring some security risks. Such as .asa, .cer and other extensions, can be used by attackers to get webshell. Because the general ASP system will limit the asp file upload, but without restrictions such as .asa or .cer extension, an attacker can change the file extension to break the upload limit, run .asa or .cer file to get webshell. (figure 2)

Remove the IIS extension is: Open the IIS Manager, right-click "Default Web Site" and select "Properties", click the "Home Directory" tab, and then click "Configure" to open the application window, and finally choose according to their needs Unnecessary application mapping such as .shtml, .shtm, .stm, etc., and then click "delete" button. (image 3)

3, cancel the visit record

IIS6.0 open by default for the web access records. When you turn on logging, IIS logs all your web access records with great detail. The content of these log files is very complex, such as access time, client IP, from which link to access, Cookies, etc., in addition to Method (Method), UserAgent (user agent) and so on. These records not only take up a lot of disk space also greatly affected the web server performance. Someone has done evaluation, stop visiting the record can improve web performance of 5% to 8%. And these records for general users, especially small and medium-sized Web sites useless, it is too system-performance-hungry, it is recommended to close it.

Cancel access to the record operation is: Open IIS Manager, navigate to a specific web site, right-click select "Properties" in the "Home Directory" tab to cancel the "Record Access" check. (Figure 4)

4, to restrict access to traffic

By default, IIS 6.0 has no limit on the amount of traffic. If the number of concurrent connections is too large, the network congestion may occur and the server may be down. So you need to restrict user access and control the flow of Web access.

Open the "Internet Information Services" manager, click the "+" in front of the host name in the right side of the window, and then click on a Web site. Select the Web site, right-click select "Properties" in the open property settings window, select the "Properties" tab, "Enable bandwidth limit" check box selected in the subsequent activation of the "maximum network settings" box, Specify the exact value of your web site's bandwidth. We can based on the performance of the server and its comprehensive consideration to continue setting. For the average corporate site will be set to 1500kb / s bandwidth traffic is almost the same. At the same time in the "website connection" can be connected to the restrictions set, we can set a value according to the situation. After completing the above settings, IIS can only use its resources are granted Web services, to eliminate the abnormal situation caused by the server overload, the burden on the Web. (Figure 5)

5, let the Web load free expansion

By default IIS is the Web for full load service, which to some extent aggravated the Web burden. How to automatically adjust the working process according to the load automatically?

With IIS 6.0 Web Gardens, we simply isolate the individual Web sites by specifying the number of worker processes to use for an application pool. Specific configuration steps are: Open the Properties dialog box for the application pool in the Internet Information Services Manager, go to the Performance page and enter in the Maximum number of worker processes box under Web Garden The number of processes. IIS 6.0 automatically reduces the number of actual worker processes after a certain amount of time (20 minutes by default) when the load on the server is small and no additional worker processes are required; additional worker processes are required if the load becomes large, IIS 6.0 again increase the number of work processes. In addition, you can enable CUP Monitoring, set Maximum CPU Utilization, Refresh CPU Utilization Value, and CPU Usage Exceeding Maximum Usage, which can be set as needed. When everything is done, it's all done for IIS and does not require administrator intervention. (Figure 6)

6, configure the application presentation pool

IIS can support multiple Web services, especially web hosting on a single server. How can we do each site independent of each other, not because of some Web site failures affect other sites? Application process pool for different designated application pool is a good solution.

(1), create

Open IIS Manager, expand the local computer, right-click Application Pool, and choose New → Application Pool. In the Application Pool Name box, enter the new application pool name. If you click Select Existing Application Pool as a Template, you can select the appropriate application pool from the list of Application Pool Names, and finally click OK. (Figure 7)

(2), assigned

In IIS Manager, right-click the site for which you want to assign the application pool and click Properties. In the site's Properties panel, "Home Directory" tab, select the application pool you just created in the "Application Pool" drop-down list. If all the options are gray, click the Create button to enter the Application Name, then in the Application Pool list box, select and assign the site's application pool. (Figure 8)

(3), recycling

Use "Recycle" feature, but set how to restore system resources for flexible use of IIS resources. Open the IIS Management Console, click the + sign, and then expand Local Computer → Application Pools. Select the application pool you want to recycle Right click to select "Properties", the application pool properties dialog box appears, click the "Recycling" tab Under it you can set the "Process Recycling", "Memory Recycling" and so on, all of these Set everyone according to the actual need to set. (Figure 9)

Summary: Through the above IIS optimization measures, Web server will be able to light their array performance will be greatly improved. Of course, to fundamentally improve Web performance, just setting softly is not enough. In addition, the need for hardware transformation, the combination of hardware and software is the most perfect solution. www.97lmm.cn picture network ....

Related Article

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.