Chapter 3.
Web Server
Mar 2023
Explain the function and characteristics of a Web
server.
Describe the process to setup and manage the
Web server
Configure HTTP server and web sites
Function of a Web Server
Primary function of a web server is accept requests
from client computers and return a response.
Used to share information
Host web services
Distribute applications
Web Server Network Infrastructure
Requirements :
Web Server
IP-based network
DNS
– Domain name
– DNS records for name resolution
A or AAAA records point to host name
CNAME records to provide aliases
Routers and other infrastructure to deliver requests
and responses.
Basic Web Architecture
The web is a two-tiered architecture.
– A web browser displays information content,
– A web server that transfers information to the
client.
Extended Website Architecture
Three-tiers by adding a back-end server that provides
services to the Web server.
Web Server Market Share
[Link]
Note: Nginx & Cloudflare servers can be used as reverse
proxy & Content Delivery Network
Forward & Reverse Proxy
External Users
Internal Users
Forward & Reverse Proxy
Forward proxy server Reverse proxy server
Acts as a front for the Acts as a front for the
user/client original web server
Process outgoing request Process incoming requests
Provide Security Provide Security
– anonymity of – anonymity of web
user/client server
Provide content caching – DDOS mitigation
Provide content filtering Provide Load balancing
Logging & monitoring Provide content caching
Server and client side processing
Server-side processing
– Performed by the Web server to create the dynamic webpage
– Eg user validation, saving and retrieving data, and navigating
to other pages.
Client-side processing
– Performed by the browser, either to form the request for the
dynamic web page or display the dynamic Web page.
– Eg collection of user inputs
Server and Client Side Processing
Common types of scripting and programming languages
used:
Server-side processing Client-side processing
– PHP – CSS
– [Link] – HTML
– Perl
– JavaScript
– J2EE
– Python – Adobe Flex
– ColdFusion
Internet Information Service
IIS is a web server service that runs on the
Microsoft .NET platform on Windows OS.
Used to host web applications.
IIS 10 is implemented as server role in Windows
Server 2019
IIS Manager administration tool
Website
A collection of related web pages that contains images,
text, audio, video, etc.
Provides visual and text content that users can view and
read
A container for applications and virtual directories
Binding protocols define the protocol used to
communicate between the server and client ie HTTP
/HTTPS.
Types of binding information to access the sites:
– IP address.
– Port number.
– Host Header / Hostname (IIS 10)
Default Web Site
Web Application
Web application
A software running on a web server that can be
accessed using a web browser.
Uses a combination of server-side scripts and client-
side scripts to present information.
Eg YouTube & Google Apps
Virtual directory
A virtual directory maps the application to the physical
directory of the application's content.
Enable web content eg images to be hosted on another
location in the file system
Location types:
– A directory on the computer
– A share located on another
computer
– A redirection to another URL
Hypertext Transfer Protocol - Secured
HTTPS
Provide secure communication
over a computer network.
Server is installed with a digital
certificate signed by a trusted
certificate authority.
All the HTTP request and
response data is encrypted using
Secure Sockets Layer (SSL) or
Transport Layer Security (TLS).
Uses port 443.
IIS Authentication Protocols
Authentication helps confirm the identity of the clients
requesting access to the server’s websites and control what
resources the user can access. Supported authentication
method includes:
i. Anonymous Authentication
– Uses a built-in account (IUSR) to login and access
resources
ii. Forms Authentication
– User enter user name & password in Logon page
– User’s credentials is passed to an authentication and
credentials database for verification.
IIS Authentication Protocols
iii. Windows Authentication
(Windows NT Challenge/Response authentication)
The client machine uses current user logon information to
access the web server.
Client and server computers are located in the same or
trusted domains.
iv. Basic Authentication
Uses clear text to send and receive user security information.
Used with SSL connection for secure communication.
v. Digest Authentication
User security information are sent in hashed format.
Only supported on Microsoft browser & Web server.
Configuring a web site
► Creating a website
► Configuring binding protocol
► Configuring authentication
21
Review Questions
Which DNS record do you need to create to
enable your webserver to be accessed using a
different name instead of the actual host name?
eg [Link] instead of [Link]
CNAME or ALIAS
22
Review Questions
You want to implement secured access to your
website by implementing HTTPS protocol. What
do you need to install on your webserver ?
Digital certificate
23
Review Questions
What language is generally used to create static
web pages ?
HTML
24
Review Questions
What user account is used to access an IIS 10
webserver in anonymous authentication?
IIS_IUSRS
25
Review Questions
You have created 3 websites on your web server.
What are the 3 binding types you could use to
configure these websites?
IP address
Port Number
Host Header/host Name
26
Review Questions
What are the protocols and port numbers used to
access web servers?
http – 80
https - 443
27
Online Quiz
Login to MyConnexion
Complete and submit quiz 3.3
Assignment – Lab
Lab 3.3 Configuring and managing web server