Internet Information Services

(Redirected from Internet Information Server)

Categories: Microsoft server technology | Web server software

Microsoft Internet Information Services (IIS, sometimes Server or System) is a set of Internet-based services for servers using Microsoft Windows. It is the world's second most used web server in terms of overall websites but most widely used web server for corporate, commerce and secure websites. Originally, it was supplied as part of the server editions of Windows NT 4.0 and was upgraded accordingly with NT 4.0's subsequent service packs and option packs. Eventually, as IIS matured, it was integrated with Windows 2000 and Windows Server 2003.

The current version is IIS 6.0 and includes servers for FTP, SMTP, NNTP and HTTP/HTTPS and is only available for Windows Server 2003. Earlier versions also included a Gopher server. IIS 5.1 , a restricted version, that supports one web site and a limited number of connections is also supplied with Windows XP Professional. For Windows Vista clients, the local IIS 7.0 web server will change to not limit on connections but will limit workloads based on the active concurrent requests improving usability and peer-to-peer scenarios. Active Server Pages support began with IIS 3.0

Contents

[edit]

Versions

[edit]

Security

Earlier versions of IIS were hit with a spate of vulnerabilities, chief among them CA-2001-19 which led to the infamous "Code Red worm"; however, the latest version of IIS, 6.0, has only three vulnerabilities that affect it. In IIS 6.0, Microsoft has opted to change the behavior of pre-installed ISAPI handlers, many of which were culprits in the vulnerabilities on 4.0 and 5.0, thus reducing the attack surface of IIS. With its next release, currently in beta and part of "Longhorn server", Microsoft goes a step further by modularizing many of the components, creating a stack from which you can pick and choose. --Baldwinmathew 04:02, 13 October 2005 (UTC)

In versions of IIS before 6.0, all the features were run on the System account, allowing exploits to run wild on the system. Under 6.0 all request handling processes have been brought under a Network Services account which has significantly fewer privileges. In particular this means that if there is an exploit in a feature or custom code, it wouldn't necessarily compromise the entire system given the sandboxed environment the worker processes run in. IIS 6.0 also contained a new kernel HTTP stack (http.sys) with a donkey stricter HTTP request parser and response cache for both static and dynamic content.

[edit]

Competitors

Apache software has the highest market share in the web server market (this includes parked web sites without any real content) and is IIS's main competitor. Solaris Operating Environment/J2EE also competes in the enterprise web services arena.

[edit]

External links

es:Internet Information Services fr:Internet Information Services it:Internet Information Services nl:Internet Information Services ja:Internet Information Services pl:IIS pt:Internet Information Services ru:IIS sv:Microsoft Internet Information Services zh:Internet信息服务