Learn Windows IIS in a Month of Lunches

Transcription

1 Learn Windows IIS in a Month of Lunches JASON HELMICK II MANNING Shelter Island

2 contents preface xix about this book xxi acknowledgments xxiii 1 Before you begin Introducing IIS What you need before you start 4 Prerequisite knowledge 4 IIS versions 7.0, 7.5, or 8 5 Windows PowerShell How to use this book 6 One hour at a time 6 Completing the labs 6 MoreLunches.com 7 Ideas to own Setting up your lab environment 7 The basic environment 8 Extending the basic environment Taking immediate control over IIS 10 Deploying the web server Locating and protecting the physical web server 13 Server location matters 13 Protecting the web server with a single firewall 15 Protecting the back-end with multiple firewalls: Working in the middle tier 16 ix

3 2.2 Installing IIS on Microsoft Windows Server Installing Installing IIS with Server Manager 19 Performing a rapid installation usingpowershell 22 IIS on Server Core 26 Preparing Server Core for IIS 27 Adding IIS to Server Core Verifying a successful installation Lab 31 Testing the default website 29 Checkingfor problems Ideas to own 31 Exploring and launching a website Locating website configuration settings 34 Locating website configuration settings using the IIS 34 Locating website configuration settings using manager PowerShell Creating new web pages for testing and troubleshooting 38 Locating the website pages in the filesystem 38 Making an easy web pagefor testing a website 39 Creating a web page using server variables for better results 41 Default 3.3 Adding new folders and applications in the default website 46 Documents 45 Adding normal folders and content 46 Adding virtual directories for better content control folders to the website Adding application 3.4 Opening your first website for business 49 Opening the right ports in the firewall 50 Getting an outside IP address 51 Configuring internet DNS for your website 51 Testing from 3.5 Lab Ideas to the outside 51 own 54 Managing application pools Creating and configuring standard application pool settings 57 Locating application pools and settings 57 Creating a new application pool 58 Moving a website or application application pool 61 into an

4 4.2 Application pool recycling: increasing reliability and 4.3 Lab 69 availability 62 Recycling an application pool 63 Modifying the default recycle settings Ideas to own 70 Adding more websites to your server Phase 1: Adding a new website using the IIS manager 73 Step 1: Enter the site name 74 Step 2: Create the application pool 75 Step 3: Set the physicalpath Phase 2: Uniquely identifying your websites with bindings 76 Defining a unique name by type 78 Defining a unique name by IP address 79 Defining a unique name by port 80 Defining a unique name by host name 81 What happens ifyou create a website with a non-unique binding? An alternate way: adding a new website using PowerShell 5.4 Lab 85 Step 1: Create the directory for the website files using New-Item 84 Step 2: Make an application poolfor the tuebsite using New-WebAppPool 84 Step 3: Make the new website using New-Website Ideas to own 87 What every administrator should know about web applications 6.1 Configuring the basics for all applications 89 Locating the IIS configuration files 89 Applying compression to make your web pages faster 91 Setting Default Documents to automatically load web pages 93 Directory Browsingfor file downloads 94 Customizing the error pages Supporting common web applications 97 Supporting applications running with IIS 6 Compatibility Mode 99 Supporting ASP and ASP.NET applications 100 Supporting CGI applications 102 Supporting PHP applications Monitoring your applications 103 Search the logs for information and problems 104 EnableFailed Request Tracing 105

5 6.4 Lab Ideas to own 110 Securingyour sites and web applications Controlling who can access your Configuring anonymous access site Configuring Windows authentication 115 Using basic authentication Setting site-level permissions: NTFS 120 Configuring permissionsfor users and groups application pools permissions Configuring 7.3 Advanced/Optional access control Lab 130 Setting authorization rules for ASP.NET applications 128 Forms-based authentication 129 Client certificate authentication Ideas to own 132 Securing the server Network protection for IIS 134 What are you worried about'? 134 Firewall security 135 Using the Windows Firewall Adding additional security 140 Blocking by network: IP and domain restrictions 140 Block common attacks using Request Filtering Monitoring process for hacking Lab 146 Loggingfiles 144 Using Process Explorer for IIS Ideas to own 147 Protecting data with, certificates Not all certificates are the same 149 Trusted and non-trusted certificates 149 Types of certificates 150 Single and multiple certificates Implementing certificates on a single IIS server 152 Generating a request 154 Completing a request 156 Exporting/Importing a certificatefor backup and additional web servers 158

6 9.3 Securing your websites 161 Binding certificates 161 Securing host name (header) SSL 162 Assigning certificates with PowerShell 163 Checkingfor certificate expiration Lab Ideas to try on own your 168 sites with FTP and SMTP with US File transfers 169 Preparing forfit 170 Public-access FIT for anonymous users 171 Isolating users with FTP and SSL SMTP for Lab 182 SMTP relays 180 Installing and configuring SMTP Ideas to own Skating administrative responsibilities through JL remote management Implementing IIS remote management 185 Installing remote management using the IIS manager 186 Configuring remote management 186 Connecting to a remote webserver Implementing IIS Remote Management Service on Server Core 191 Installing the Management Service 191 Enabling the Remote Management Service 192 Assign a trusted certificate 192 Starting the Management Service Delegating access to other administrators 11.4 Lab 197 and developers 193 Configuring permissions for websites and applications 193 Customizingfeature 11.5 Ideas to access 196 own 198 fy Optimizing sites for users and search engines 199 ^ 12.1 Search Engine Optimization Toolkit 200 Installing and using the Search Engine Optimization Toolkit 200 Locating broken site links 201 Preventing non-relevant content from being searched 204

7 12.2 Improving SEO with URL Rewrite 206 Installing URL Rewrite 206 Shortening long URLs for belter SEO Using regular expressions to improve 12.4 Lab 217 URL Rewrite 209 Basic regular expressions every admin should know 209 Using URL Rewrite to redirect website domains and improve SEO 213 Redirecting customers to a secured website Ideas to own 218 Building a web farm with Microsoft Network Load Balancing Introduction to the load balancing web farm 220 Using Microsoft Network Load Balancing 221 Benefits and issues with Microsoft NLB 221 When to use Microsoft NLB Deploying a web farm using Microsoft NLB 223 Creating the remote connections 223 Installing the NLB feature 224 Creating and configuring the bad balance with Microsoft NLB Deploying websites to a web farm using PowerShell 226 Deploying website files to remote servers 226 Creating a website for IIS Health and verification for NLB Lab 229 Checking the health of the load balance 227 Verifying operation of the load balance 228 the 13.6 Ideas to own 230 Building a web farm with Application Request Routing Installing ARR 232 Requirementsfor Application Request Routing 233 Installing Application Request Routing Creating a web farm with ARR 234 Creating a load balance with ARR Configuring Application Request Routing 238 Examining the URL Rewrite rule 238 Changing the load balancing algorithm 239

8 XV 14.4 Logging and health monitoring with ARR 241 Checking the health of the load balance 241 Health monitor statistics Lab Ideas to try on own your 244 High availabilityfor ARR using Microsoft NLB Adding affordable high availability 246 Requirementsfor a highly available ARR 246 Installation of NLB for ARR 247 Monitoring NLB: a quick review Lab (optional) Ideas to own 249 Sharing content and configuration to the web farm Sharing content for a web farm using PowerShell 251 Manually deploying local-stored content using PowerShell 251 Automating with PowerShell scripts Sharing content using Distributed File System (DFS) 254 Installing DFS 254 Creating a replication group 255 Adding web servers to the replication group 256 Selecting the replication topology and schedule 257 Selecting the folders to replicate Sharing content from a single Creating 16.4 Lab 264 a network share Ideas to own 265 location 261 Sharing US configurationsfor a web farm Configuring Shared Configurations 267 Configuring Shared a Configurations using clustered network share 268 Exporting the configurations from the first (master) webserver 269 Enabling Shared Configurations 271 Configuring IIS for Shared Configurations usingdfs Installing components with Shared Configurations Lab 275 Installing new software using all-at-once 273 Installing new software using a staggered approach Ideas to own 277

9 Using the central certificate store for certificate management Installing and configuring the central certificate store 279 Storing and naming certificates 280 Installing CCS on a local web server 280 Creating the website bindings for SSL and CCS Using CCS on remote web servers Lab 286 Installing CCS on remote servers 284 Enabling CCS on remote servers 284 Web bindingsfor CCS on remote servers 285 Using CCS with Shared Configurations Ideas to own 287 Web farm provisioning 19.1 Implementing with the Web Farm Framework 288 the Web Farm Framework with ARR 289 Configuring the environment 290 Installing and configuring the control server 291 Preparing the primary and secondary servers Building 19.3 Managing 19.4 Lab 303 the web farm 294 Creating the web farm on the control server 294 Adding the primary and secondary servers 297 the web farm 299 Using the tools under the actions pane 300 Changing the provisioning settings 302 Monitoring the webfarm Ideas to own 303 Disaster recoveryfor US Analyzing your environment for disaster recovery 305 The critical operational path 305 Determining points offailure in IIS Back up the critical components and data Lab 312 Determiningyour critical components to back up 307 How to back up and restore IIS 308 What you may have missed 308 Planning disaster recoveryfor xoeb farms failure 310 Don't forget 20.4 Ideas to own 312 to monitor Recoveringfrom a

10 xvii The final exam The lab setup Your lab challenge 314 Never the end Resources for the inadvertent IIS administrator DevOps: the ever-changingjob of the IIS administrator 319 IIS PowerShell cheat sheet 321 Getting a list of IIS components 321 Installing IIS 321 ' Testing a default installation 321 Importing and viewing cmdlets for IIS 321 a Vieiving website 321 Navigating to application pools 322 Getting information about application pools 322 Creating application pools 322 Changing a xuebsite to a new application pool 322 Getting a list of worker processes 322 Restarting an application pool 322 Setting application pool settings (managed runtime) 322 Setting application pool recycling settings (recycle time) 322 Setting application pool recycling settings (schedule) 322 Viewing events for application pools 322 Getting the application pool identity 322 ' Setting an application pool identity (example for NetworkService) 322 ' Creating Settingyour own custom application pool user account as the identity 322 websites 323 Setting static compression for a server 323 Getting and setting static compression for a site 323 Adding dynamic compression 323 Changing directory browsing 323 Getting and setting the Default Documents 323 Adding IIS 6 compatability mode AddingASP and ASP.Net 323 ' Adding CGI 323 Listing all log files for every website 323 Listing all HTTP requests that occurred at 9:00 p. m. 324 ' Listing all requestsfrom clients to a particular URL 324 Listing all requests to/from a particular IP address 324 Adding Failed Request Tracing 324 Getting a list of authentication mechanisms 324

11 Getting anonymous authentication settings 324 Disabling/enabling anonymous authentication for the entire web server 324 Enabling/disabling anonymous authentication for a luebsite or application 324 Adding Windows authentication 324 Getting information about Windows authentication settings 324 Enabling/disabling Windows authentication 324 Enabling/disabling Windows authentication per site or application 324 Adding basic authentication 324 Getting configuration information about basic authentication 325 Enabling/disabling basic authentication 325 Enabling/disabling basic authentication per site or application 325 Installing certificates 325 Adding an SSL binding 325 Binding a certificate to a website 325 Installing Remote Management to multiple computers using PowerShell Remoting 325 Installing a new certificate for Remote Management 325 Installing Microsoft NLB to multiple servers 326 Adding DNS records for websites 326 Deploying simple websites to a web farm 326 Making new sites on a web farm 326 Installing the central certificate store 326 Lab setup guide Using Windows 7 or Windows 8 as a standalone client Choosing a virtualization platform 328 Hyper-V on Windows Hyper-V - on Server 2008 R2 or Server Other options Single-server environment Two-server environment 329 Building the domain controller 329 Installing Active Directory Certificate Services (optional) 330 ' The remaining Web 1 server The extended environment 330 Extended environment: basic 331 Extended environment: advanced Final notes 331 index 333