IIS (Internet Information Services)

IIS (Internet Information Services)
Name	Internet Information Services
Developer	Microsoft
Released	1995
Latest release	Version varies by Windows Server release
Operating system	Microsoft Windows
Platform	x86, x64, ARM64
Genre	Web server, Application server
License	Proprietary

IIS (Internet Information Services) is a family of web server and application server software created and maintained by Microsoft. It provides HTTP, HTTPS, FTP, FTPS, SMTP and other network services for hosting websites, web applications and services on Windows Server platforms and desktop editions such as Windows 10 and Windows 11. Widely used in enterprise and hosting environments, IIS integrates with Active Directory, Windows Server Update Services and other Microsoft server technologies to deliver managed hosting, authentication, and extensibility for .NET, ASP and static content.

Overview

IIS functions as a modular web server within the Microsoft Windows ecosystem and competes historically with servers like Apache HTTP Server, Nginx and Lighttpd. It supports hosting of websites, web APIs, file transfer services and mail relay functions across local area networks and the public internet. IIS is commonly deployed alongside Microsoft SQL Server, Visual Studio, SharePoint and Exchange Server in enterprise stacks, enabling integration with Azure services and virtualization platforms such as Hyper-V and VMware ESXi.

Architecture and Components

IIS architecture uses a kernel-mode driver and user-mode worker processes that isolate application pools and enable process recycling. Core components include the World Wide Web Publishing Service (WWW), the HTTP.sys kernel-mode listener, the worker process w3wp.exe, and the IIS Manager GUI. Other components and modules include modules for authentication, caching, compression, URL rewriting, and logging. Integration points include the Windows Event Log, Performance Monitor, and the Component Object Model for programmatic control. Application pools partition sites into separate process isolation boundaries that map to worker processes and allow granular resource management.

Features and Functionality

IIS provides features such as request filtering, URL authorization, output caching, dynamic content compression, request tracing, and support for HTTP/2 and TLS. It offers native support for hosting ASP.NET applications and integrates the Common Gateway Interface model and FastCGI for non-native technologies like PHP and Python through adapters. IIS supports virtual directories, host headers, site bindings, and wildcard mapping for multi-tenant hosting. Media streaming, WebSocket support, application initialization, and WebDAV are additional functional areas that facilitate multimedia, real-time, and collaborative web applications deployed on Windows Server and later releases.

Security and Authentication

Security in IIS relies on a layered approach using transport security (TLS), authentication modules (Windows Authentication, Basic, Digest, and forms-based), and authorization rules configured per site or application. Role-based access control is commonly enforced via Active Directory integration and Kerberos delegation mechanisms. IIS includes request filtering to mitigate common attack vectors, URLScan history, and features to mitigate cross-site scripting (XSS) and SQL injection through input validation modules and request limits. Logging to the Windows Event Log and centralized auditing via System Center and Azure Monitor supports compliance regimes and incident response workflows.

Administration and Management

Administration is performed through tools such as the IIS Manager MMC snap-in, PowerShell cmdlets, and Web Deploy (MSDeploy) for automated deployments. Centralized management and provisioning can be achieved with System Center orchestration, Desired State Configuration, and group policy integration with Active Directory Domain Services. Administrators use configuration files (applicationHost.config and web.config) to persist settings, and utilize appcmd.exe for scripted administration. Monitoring and diagnostics leverage Failed Request Tracing, performance counters in Performance Monitor, and integration with Event Viewer and third-party monitoring systems.

Development and Extensibility

IIS is extensible via native modules, managed modules, and ISAPI extensions and filters, enabling custom authentication, logging, and request handling. Developers build and debug web applications using Visual Studio and deploy via Web Deploy or CI/CD pipelines in Azure DevOps or third-party systems like Jenkins and TeamCity. Platform support for ASP.NET Core allows cross-platform development with hosting adapters that enable IIS to act as a reverse proxy for Kestrel. SDKs and APIs include the Management API, Microsoft.Web.Administration, and the IIS Administration API for automation and custom tooling.

History and Versions

IIS originated as part of Windows NT 4.0 Option Pack and has evolved through iterations shipped with successive Windows and Windows Server releases. Major milestones include the addition of native support for ASP.NET with IIS 5.0 and IIS 6.0 introducing the HTTP.sys kernel driver and process isolation model. Later versions added integrated pipeline support, modular architecture, and features like request filtering, URL rewriting, and enhanced security. IIS has continued to evolve alongside .NET Framework, Windows Server Core and Azure migration strategies, maintaining backward compatibility while adopting standards such as HTTP/2 and modern TLS cipher suites.

Category:Microsoft software Category:Web server software