117
votes
Accepted
Best way to redirect all HTTP to HTTPS in IIS
The IIS URL Rewrite Module 2.1 for IIS7+ may be your friend. The module can be downloaded from IIS URL Rewrite. Using the URL Rewrite Module and URL Rewrite Module 2.0 Configuration Reference explain ...
- 3,107
22
votes
Accepted
Chrome reports ERR_SPDY_INADEQUATE_TRANSPORT_SECURITY connecting to local web server over HTTPS
Http/2 requirements as per https://httpwg.org/specs/rfc7540.html#rfc.section.9.2.2 :
9.2.2 TLS 1.2 Cipher Suites
A deployment of HTTP/2 over TLS 1.2 SHOULD NOT use any of the cipher suites that are ...
- 34.4k
21
votes
How to resolve FTP Error “Failed to retrieve directory listing” for Administrator account in IIS 7.5
I had this issue as well, and it was related to the data ports being selected by IIS. I set it up to use a specific port range but when my client tried to use passive mode it showed that it was using ...
- 311
21
votes
How to See Detailed 500 Errors?
In IIS Manager, select your site, double-click the Error Pages icon and click on Edit Feature Settings in the pane on the right. Choose Detailed Errors. If that is not enough, click on the .NET Error ...
- 13.9k
19
votes
Accepted
Deploying ssl Certificates per site on iis
This can be achieved using Server Name Indication (SNI), and configuring it on IIS 8 (not available on previous versions)
after checking the server name indication checkbox you won't get the same ...
- 1,223
17
votes
Accepted
Remove IIS from Win2008 R2 -- side effects?
If you're not using IIS, you absolutely should remove it, for the reasons you mentioned - maintenance and security.
The only effect of removing IIS is an inability to use IIS. No management or ...
- 53.6k
16
votes
Accepted
Stopping IIS websites permanently with PowerShell
Joseph's answer makes perfect sense, but it doesn't seem to work.
The attribute 'serverAutoStart' on the site node in applicationHost.config is not changed.
One way to change is:
Set-...
- 13.9k
16
votes
Difference between "Start application pool immediately" and Start Mode AlwaysRunning
Had the same question as the original poster but could not find a concise answer, below is the analysis from my research.
Application Pool != Worker Process (w3wp.exe)
Typically we see a single w3wp....
- 191
15
votes
Can't open IIS manager
I found a new solution. First, when we get this error IIS Manager couldn't appear. Go to IIS Manager and right click to go Properties. On the shortcut section you can see Run line. Change this value ...
- 151
15
votes
Can we use wildcards with NETSH HTTP ADD URLACL in Windows 7 / 2008r2?
Basing on @jgillich answer, I propose to do the following:
netsh http add urlacl url=http://+:80/ sddl=D:(A;;GX;;;S-1-1-0)
sddl argument will be virtually the same as user, but you don't need to ...
- 287
15
votes
Accepted
What is a correct way(s) to allow login to an IIS site through a reverse proxy?
The problem is NTLM authentication (note WWW-Authenticate: NTLM ...), AKA Windows Authentication.
NTLM authentication authenticates connections instead of requests, and this is somewhat contradicts ...
- 3,536
15
votes
Accepted
Configure HAProxy to include host headers for different backends
I'm not sure if the following will work, and can't test right now, but maybe this is still helpful. (I'll have a look again later with some more time):
Solution 1:
backend nodes
mode http
...
- 5,541
14
votes
Accepted
Gracefully take a server out of Azure Load Balancer (drain stop)
The recommended way to do this is to have a custom health probe in your load balanced set. For example, you could have a simple healthcheck.html page on each of your VM's (in wwwroot for example) and ...
- 281
14
votes
Accepted
SSL Server name mismatch how to bypass ie11
If you have access to create your certificates for that server I suggest you create a certificate that includes alternate names that the server may be known as. In that way the browser will ...
- 447
13
votes
Accepted
Response time slows as the day goes on, where to start troubleshooting?
There are a number of things that could be causing this - unfortunately, we probably need a bit more information.
Before I get into my actual response, just a quick point on your HTML pages: ...
- 246
13
votes
Accepted
ApplicationPoolIdentity Environment variables IIS
Yes! (As long as you're using IIS 7.0+) You need to set the loadUserProfile setting for the Application Pool Identity to true. The Application Pool Identity will now have a user profile under \Users\[...
- 1,729
13
votes
Accepted
Windows Server 2012 R2 IIS 10 / HTTP/2
No, IIS is a integrated part of the OS and can't be separately upgraded to a newer version. HTTP/2 especially isn't implemented in IIS, but in a kernel mode driver that is naturally only available in ...
- 98.1k
12
votes
Accepted
IIS only serve requests with hostnames
You can use the Url Rewrite feature of IIS to do that :
Open the URL Rewrite feature :
Add a rule of type "Request blocking" :
Block the requests based on host name :
If you know your IP ...
- 238
12
votes
Accepted
Why is Microsoft IIS so fast compared to nginx?
I'm extremely skeptical about these results. While IIS may be faster, both posts do not mention anything specific about the hardware, OS settings(filesystem mount options, io schedulers, network ...
- 625
12
votes
How to design/ensure high-availability of web servers?
High availability without some kind of load balancing using a dedicated server would not be possible.
You would need to have 2 servers and there are some software options for load balancing. Windows ...
- 9,536
12
votes
Wordpress on IIS replication with robocopy
Having 4 front end servers that share the same files at the same time and each is able to write without using some kind of DFS or third party program dedicated to directory synchronization would be a ...
- 9,536
12
votes
Accepted
Wordpress on IIS replication with robocopy
Thanks for all the suggestions people.
Our solution was using a peer-to-peer synchronization approach using a tool called resilio.
Resilio allowed us to configure a number of computers (in this case ...
- 829
12
votes
Accepted
How to restrict unauthorized domains pointing to my website's IP address
There are two issues you could be describing here. The first is someone simply setting up a DNS binding to your IP address. Preventing this in IIS is extremely simple. You simply alter the hostname ...
- 369
12
votes
Accepted
URL Rewrite not available after installing on IIS 10
I found out that URL Rewrite can be uninstalled via Add or Remove Programs. Apparently its named IIS URL Rewrite Module 2 and not Microsoft URL Rewrite Module which a lot of posts suggest.
After ...
- 263
12
votes
530 Valid hostname is expected when setting up IIS 10 for multiple sites
When configured with two or more hostnames, the correct virtual host name and username must both be sent in the username by the ftp client. Separate the site name and user with the vertical line ...
- 1,540
11
votes
Security Risk? Microsoft-HTTPAPI/2.0
If the response's Server header returns "Microsoft-HttpApi/2.0", it means that the HTTP.sys is being called instead of IIS. Exploits and port scans use this as a means of fingerprinting an IIS server ...
- 151
11
votes
Wordpress on IIS replication with robocopy
I don't think scheduled tasks and Robocopy is a great approach. Because of the 5 minute window there will be times where a resource is requested but the server selected by the load balancer won't have ...
- 31.2k
10
votes
What should I do to make sure that IIS does not recycle my application?
Kindly check,
Why Do We Recycle Our Application Pools?
if you browse the web to find the reason why application pools are configured to recycle automatically periodically, you’ll be hard pressed to ...
- 209
10
votes
IIS gives wrong certificate for an HTTPS request
Just to follow up on this for others that could not resolve it using the above solution, I had experienced a similar problem whereby the server was delivering the wrong certificate for HTTPS ...
- 201
10
votes
Prevent URL Rewrite rules from being inherited by subdirectories in IIS7
I recently ran into this problem, in a similar situation. But the answer from rjenkins would seem to cause problems with virtual applications that relied on inheritance of parent settings.
If you ...
- 203
Only top scored, non community-wiki answers of a minimum length are eligible