Understand HTTP.sys Web Server In ASP.NET Core

public class Program  
{  
    public static void Main(string[] args)  
    {  
        BuildWebHost(args).Run();  
    }  
    public static IWebHost BuildWebHost(string[] args) =>  
        WebHost.CreateDefaultBuilder(args)  
            .UseStartup<Startup>()  
            .UseHttpSys(options =>  
            {  
                options.Authentication.Schemes = AuthenticationSchemes.None;  
                options.Authentication.AllowAnonymous = true;  
                options.MaxConnections = 100;  
                options.MaxRequestBodySize = 30000000;  
                options.UrlPrefixes.Add("http://localhost:5000");  
            })  
            .Build();  
}

• Maximum client connections: The maximum number of concurrent open TCP connections for the application using the MaxConnections property. The connection can be unlimited if this property is set to null.
• Maximum request body size: We can override the value of the maximum request body size by using the MaxRequestBodySize property. The default value for maximum request body size is 30,000,000 bytes (28.6 MB approximately). We can also override the value by using the RequestSizeLimit attribute on the action method. This is the recommended way.

  [RequestSizeLimit(200000000)]
  public IActionResult Index()
  {
      return View();
  }
  

Configure URLs and ports to listen on

ASP.net core application binds to "http://localhost:5000" by default. We can configure URL prefixes and Port by using one of the following methods.

• Using the "UseUrl" extension method
• The URL command-line argument
• The ASPNETCORE_URLS environment variable
• The UrlPrefixes property on HttpSysOptions

The main advantage of UrlPrefixes is that we get an error message immediately if we try to add a prefix in the wrong format. The main advantage of the "UseUrls" method is that we can more easily switch between HTTP.sys and Kestrel.

Authentication

It exposes the HTTP.sys authentication configurations. It contains two properties.

• Schemes: It defines authentication type none, basic, NTLM, etc.
• AllowAnonymous: It allows an anonymous user if it is set to true.

It can be modified at any time before disposing of the listener.

• MaxAccepts: It is the maximum number of concurrent accepts.
• EnableResponseCaching: It attempts kernel-mode caching for responses with eligible headers.
• RequestQueueLimit: It allows to user set / gets the maximum number of requests that will be queued up in Http.Sys server.
• ThrowWriteExceptions: If it is set to true, it should throw exceptions when the response body writes fail due to client disconnects. The default value is set to false.
• Timeouts: It exposes the HTTP.sys timeout configuration. It may be modified at any time before disposing of the listener.

Both HTTP.sys and IIS rely on the HTTP.sys kernel-mode driver to listen for and process requests. IIS provides an easy way to configure the application whereas HTTP.sys servers everything we need to configure by ourselves. The netsh.exe tool can help us to configure HTTP.sys. We can assign SSL certificates and reserve URL prefixes by using this tool. To run this tool, required administrative privileges.

Some third-party tools can be used to configure the HTTP.sys server. These tools are not provided by Microsoft and these tools run as administrators by default

• http.sys Manager: It provides UI for configuring SSL, Options, certificate trust list, reservations, and prefixes.
• HttpConfig: It is also able to configure SSL and URL prefixes. It exposes a few more configuration options than HTTP.sys Manager. It cannot create a new CTL (Certificate Trust List) but can be assigned to an existing one.

The default launch profile is IIS Express in Visual Studio. To run the application as a console application, we need to manually change the selected profile or alternatively run the project using CLI.

Summary

Http. sys web server introduced with .net core framework 2.0. It is an alternative of the Kestrel server. It runs only with Windows. It cannot be used with IIS (or IIS Express) as it is incompatible with the ASP.NET Core Module.