Buenas prácticas AppPool, sitios web, aplicaciones, directorios virtuales

[Preguntón Cojonero Cabrón]

Hola a todo el grupo y feliz año.

En un cliente tenemos un servidor Windows Server 2012 R2, servidor web IIS, aspnet 4.7.1, con 51 aplicaciones bajo "Default Web Site" y el mismo DefautlAppPool.

"Default Web Site" usa el puerto 80.

Existen también 2 sitios web, con diferente host header/ IP address / port combination.

Sobre puertos y host headers: "And really there is no need to use ports now. It is not 1999. No one uses that anymore setup separate host headers for each site."

Una buena guía sobre app pools: https://manage.accuwebhosting.com/knowledgebase/2053/Everything-you-should-know-about-IIS-Application-Pools.html

Por ejemplo, listamos los sitios web:

%windir%\system32\inetsrv\AppCmd.exe list sites

SITE "Default Web Site" (id:1,bindings:http/*:80:,net.pipe/*,net.msmq.formatname/localhost,net.tcp/808:*,state:Started)
SITE "site2" (id:2,bindings:http/*:2123:,state:Started)
SITE "site3" (id:3,bindings:http/*:5000:zzzzz.xxxxxxxxx.com,state:Started)

Y listamos las aplicaciones, la gran mayoría bajo Default Web Site:

%windir%\system32\inetsrv\AppCmd.exe list app

APP "Default Web Site/" (applicationPool:DefaultAppPool)
APP "Default Web Site/xxxxx1" (applicationPool:DefaultAppPool)

...
APP "Default Web Site/xxxxxxx51" (applicationPool:DefaultAppPool)

APP "site2/" (applicationPool:DefaultAppPool)
APP "site3/" (applicationPool:HomeServeAppPool)

La primera recomendación es sobre Application Pool y su Identity:

"It is not recommended to host so much application under the same application pool while they should require the different permission. 

Use the same application identity may break the isolation function for application pool. If one application get stucked, all the application may stop working as well. 

In addition, the application pool has its own concurrent restriction, if you host so much application in the same application pool, the request may be abused or hanged."

¿Habrá alguna recomendación sobre los "paths" ?

c:\inetpub\wwwroot  para Default Web Sites y sus aplicaciones

c:\inetpub\Sites   para otros sitios Web y aplicaciones

¿Cómo lo ven?

No se encuentran guías oficiales de Microsoft al respecto, hemos encontrado esta buena referencia:

https://blogs.msdn.microsoft.com/cenkiscan/2012/06/20/iis-best-practices/

"For a very long time, I have been asked for a document on IIS best practices. There are some blogs/articles on the Internet but I could not find a complete one

Actually, the main problem here is that there can not be “best practices” for a web server. A web server is just a hosting platform for applications, and, each and every application has its own needs. Therefore, in many cases, you will not have one universal best practice."

Qué opinión tenéis?

Muchas gracias, feliz año!!!