Jorke Odolphi Microsoft Australia web platform architect evangelist [email_address] @jorke

PHP Developers longzheng

So Bacon has feathers now? Contributing to Open Source Open Specification Promise Apache Software Foundation

IIS Request Processing Server functionality is split into ~ 40 modules... Modules plug into a generic request pipeline… Modules extend server functionality through a public module API. Authorization ResolveCache UpdateCache … … … Monolithic implementation Install all or nothing … Extend server functionality only through ISAPI … Send Response Log Compress NTLM Basic Determine Handler CGI Static File ISAPI Authentication Anon SendResponse Authentication ExecuteHandler ASP.NET PHP

IIS 6.0 ASP.NET Processing Runtime limitations Only sees ASP.NET requests Feature duplication … … … … aspnet_isapi.dll Send Response Log Compress NTLM Basic Determine Handler CGI Static File ISAPI Authentication Anon Authentication Forms Windows Map Handler ASPX Trace …

IIS6 Application Framework support Common Gateway Interface (CGI) for CGI and PHP applications Benefits Very simple to implement and use – single-threaded execution Disadvantages Poor performance due to high process creation cost Creates and passes request data to a new CGI process Waits for CGI process to produce response Shuts down CGI process

Common Gateway Interface (CGI) for CGI and PHP applications

Benefits

Very simple to implement and use – single-threaded execution

Disadvantages

Poor performance due to high process creation cost

Creates and passes request data to a new CGI process

Waits for CGI process to produce response

Shuts down CGI process

IIS6 Application Framework support Internet Server Application Programming Interface (ISAPI) Benefit of ISAPI Can be extremely fast when written correctly Disadvantage of ISAPI Must be thread-safe (many PHP extensions are not!) Requires development in C++

Internet Server Application Programming Interface (ISAPI)

Benefit of ISAPI

Can be extremely fast when written correctly

Disadvantage of ISAPI

Must be thread-safe (many PHP extensions are not!)

Requires development in C++

IIS 7.0 ASP.NET Request Processing Classic Mode runs as ISAPI Integrated Mode .NET modules / handlers plug directly into pipeline Process all requests Full runtime fidelity Authorization ResolveCache UpdateCache … … … … aspnet_isapi.dll Log Compress Basic Static File ISAPI Anon SendResponse Authentication ExecuteHandler Authentication Forms Windows Map Handler ASPX Trace …

Classic Mode

runs as ISAPI

Integrated Mode

.NET modules / handlers plug directly into pipeline

Process all requests

Full runtime fidelity

New Configuration NET global settings .NET Framework Global web.config machine.config IIS 7 applicationHost.config Site Root web.config <system.web> .NET settings .. <system.webServer> IIS 7 Delegated settings ASP.NET global settings Global settings and location tags

PHP Setup

Per-site PHP configuration Configuring FastCGI process pool < fastCgi > < application fullPath =&quot;C:PHPphp-cgi.exe&quot; arguments =&quot;-d my.website=website1&quot;> < environmentVariables > < environmentVariable name =&quot;PHPRC&quot; value =&quot;C:WebSiteswebsite1&quot; /> </ environmentVariables > </ application > </ fastCgi > Combination of fullPath and arguments uniquely identify FastCGI process pool definition PHPRC environment variable contains path to the php.ini file

Per-site PHP configuration Configuring Handler Mapping < system.webServer > < handlers accessPolicy =&quot;Read, Script&quot;> < add name =&quot;PHP via FastCGI&quot; path =&quot;*.php&quot; verb =&quot;*&quot; modules =&quot;FastCgiModule&quot; scriptProcessor =&quot;C:PHPphp-cgi.exe|-d my.website=website2&quot; resourceType =&quot;Unspecified&quot; requireAccess =&quot;Script&quot; /> </ handlers > </ system.webServer > Reference FastCGI process pool by concatenating [fullPath]|[arguments]

PHP Setup Feature Delegation Remote Administration Web Server Core Integration

Thread safe Non Thread Safe

PHP with FastCGI Zend Collaboration Built in Support for Fast CGI Re-use of processes BIG performance boost Thread Safe vs Non Thread Safe Thread Safe Non-Thread Safe

Zend Collaboration

Built in Support for Fast CGI

Re-use of processes

BIG performance boost

Thread Safe vs Non Thread Safe

FastCGI Handler Architecture IIS Worker Process Request queue FastCGI process pool for PHP5 php-cgi.exe FastCGI process pool for PHP4 php.exe FastCGI protocol over named pipes or TCP

Best Practices for Running PHP on IIS7 Want to set PHP specific environment variables in the web.config file? Use environmentVariables configuration setting to set PHP specific environment variables. <fastCgi> <application fullPath=&quot;C:PHPphp-cgi.exe&quot; instanceMaxRequests=“10000&quot;> <environmentVariables> <environmentVariable name=”PHP_FCGI_MAX_REQUESTS” value=”10000”/> </environmentVariables> </application> </fastCgi>

Want to set PHP specific environment variables in the web.config file?

Use environmentVariables configuration setting to set PHP specific environment variables.

<fastCgi>

<application fullPath=&quot;C:PHPphp-cgi.exe&quot;

instanceMaxRequests=“10000&quot;>

<environmentVariables>

<environmentVariable

name=”PHP_FCGI_MAX_REQUESTS”

value=”10000”/>

</environmentVariables>

</application>

</fastCgi>

Best Practices for Running PHP on IIS7 Is your server under so much load that your clients are getting timeout responses? The FastCGI process will be terminated if it does not respond to FastCGI handler within specified time period. Set the requestTimeout (number of seconds to wait for process to handle the request) value to be higher than the activityTimeout (number of seconds to wait for any process activity) value. <fastCgi> <application fullPath=&quot;C:PHPphp-cgi.exe&quot; activityTimeout=“30&quot; requestTimeout=“90&quot;/> </fastCgi>

Is your server under so much load that your clients are getting timeout responses?

The FastCGI process will be terminated if it does not respond to FastCGI handler within specified time period.

Set the requestTimeout (number of seconds to wait for process to handle the request) value to be higher than the activityTimeout (number of seconds to wait for any process activity) value.

<fastCgi>

<application fullPath=&quot;C:PHPphp-cgi.exe&quot;

activityTimeout=“30&quot;

requestTimeout=“90&quot;/>

</fastCgi>

Manage CPU utilization Windows Server Resource Manager (WSRM) Available in all SKU’s of WS2008 Ensures that process gets *at least* the configured CPU percentage Kicks in only if overall CPU load is more than 70% IIS team tested WSRM with 4000 web sites

Windows Server Resource Manager (WSRM)

Available in all SKU’s of WS2008

Ensures that process gets *at least* the configured CPU percentage

Kicks in only if overall CPU load is more than 70%

IIS team tested WSRM with 4000 web sites

Performance Scaling Out WSRM

Performance Best Practices Enable Output Caching for semi-dynamic pages Low bandwidth Branch Offices? Enable Dynamic Compression ( ~ 5% CPU overhead) Need to run many web apps on a single box? Run IIS worker processes in Wow64 mode Room for the OS, scalability for your web apps It’s an per-AppPool setting now: Enable32BitAppOnWow64 Thinking about buying new Web Server hardware? W2K8 scales extremely well on new multi-proc boxes (4 and 8 core) ASP.NET op caching vs. IIS op caching vs. KM output caching

Enable Output Caching for semi-dynamic pages

Low bandwidth Branch Offices?

Enable Dynamic Compression ( ~ 5% CPU overhead)

Need to run many web apps on a single box?

Run IIS worker processes in Wow64 mode

Room for the OS, scalability for your web apps

It’s an per-AppPool setting now: Enable32BitAppOnWow64

Thinking about buying new Web Server hardware?

W2K8 scales extremely well on new multi-proc boxes (4 and 8 core)

ASP.NET op caching vs. IIS op caching vs. KM output caching

Performance Best Practices 1000s of requests per second? Remove modules you don’t need You don’t know why some pages are so slow? Turn on Failed Request Tracing and the “time-taken” feature to investigate You * script-mapped all requests to ASP.NET in IIS6? Integrated Pipeline is much faster than an IIS6 * scriptmap solution Try together with IIS7 URL Authorization.

1000s of requests per second?

Remove modules you don’t need

You don’t know why some pages are so slow?

Turn on Failed Request Tracing and the “time-taken” feature to investigate

You * script-mapped all requests to ASP.NET in IIS6?

Integrated Pipeline is much faster than an IIS6 * scriptmap solution

Try together with IIS7 URL Authorization.

Performance Best Practices PHP applications? PHP on top of FastCGI is much faster than traditional CGI The majority of your requests go to your Default Document? Put it on top of the list Otherwise IIS7 has to check every time Static default documents will be cached in kernel-mode Looking for tools to measures web server performance? Try WCAT 6.3 from www.iis.net/downloads

PHP applications?

PHP on top of FastCGI is much faster than traditional CGI

The majority of your requests go to your Default Document?

Put it on top of the list

Otherwise IIS7 has to check every time

Static default documents will be cached in kernel-mode

Looking for tools to measures web server performance?

Try WCAT 6.3 from www.iis.net/downloads

Performance Boosting Better compression for static and dynamic Output caching a module Per URL / query string / request headers Huge improvements to allow for high density or high availability

Better compression for static and dynamic

Output caching a module

Per URL / query string / request headers

Huge improvements to allow for high density or high availability

IIS Extensions Mod_rewrite support for URL rewriting

Mod_rewrite support for URL rewriting

Jorke Odolphi [email_address]

SID Injection AppPool: newPool username: newPoolUser password: <password> LogonUser AccessCheck AccessCheck Service Host (SVCHost.EXE) Windows Process Activation Service (WAS) World Wide Web Service (W3SVC) applicationhost.config Token Token NewPool Wwwroot default.htm ACL OK Otherpool Wwwroot default.htm ACL Denied