Introduction to .NET Framework 3.0/Features of IIS 7.0

IIS 7.0 is an extension of IIS 6.0 and has a lot in common with IIS 6.0. While the underlying concepts remain the same various dramatic new concepts have been introduced in IIS 7.0.

Modular Architecture
IIS 7.0 introduces the system of a "modular architecture". A modular architecture is one in which the extra functionality in the form of different modules can be added to the server and could be enabled or disabled depending on the administrator's wish. This is a marked change from the monolithic architecture implemented in earlier systems.

The modules that shall be shipped with the server include:


 * HTTP Modules
 * Security Modules
 * Content Modules
 * Compression Modules
 * Caching Modules
 * Logging and Diagnostics Modules

More Security
In earlier versions of IIS, the ASP.NET web services were executed by aspnet_wp.exe (IIS 5.0) and w3wp.exe (IIS 6.0). Thus the pages were executed outside the IIS and could easily become targets of attacks by spoofers listening at the port. But in IIS 7.0, the pages are compiled and executed within the IIS and even if the hacker gains access to the system the stream of data which comes out of the port appears highly unintelligible and impossible for a hacker or spoofer to break.

Unfortunately, IIS 7.x, like IIS 6.x, is still running in the HTTP.SYS Windows kernel-driver, which Microsoft documents as dangerous:

"when a kernel-mode driver fails, it can crash an entire system, whereas the failure of a user-mode driver causes only the current process to crash. Windows Server can still run kernel-mode drivers, although this is not recommended for the stability reasons mentioned previously."

https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc784266(v=ws.10)

Ports
IIS 7.0 allows the user to select the port where he wants the program or service to run. This is a welcome break from old versions of IIS where all applications would be run at a standard 8080 port making transactions less secure and slowing down execution.

Modules and Handlers
In IIS 6.0, the modules and handlers are specified in the  configuration section. However in IIS 7.0, a new tag  is introduced and the modules and handlers are specified here. This is one of the most important migration issues that must be looked into while migrating from IIS 6.0 to IIS 7.0.

This is done by placing the tags  and  in  tag.

Microsoft Management Console
The Microsoft Management Console (MMC) is a component of modern Microsoft Windows operating systems that provides system administrators and advanced users with a flexible interface through which they may configure and monitor the system