Hosting Platforms Overview

A Quick Overview

The hard part is deciding which server platform best suits your needs. While Apache web servers account for about 65% and Microsoft Windows IIS accounts for about 15% of all active websites (Netcraft: Dec. 2011), mostly among enterprise accounts, you should not let popularity of one over another force your decision. Instead of popularity you should look at what features your website or application needs and then pick the platform that meets these needs. In many cases this will depend on what your web designer is most familiar with.

The major differences between Apache and Microsoft Windows IIS is how each platform handles dynamic web pages. Microsoft Windows IIS was originally written to use Active Server Pages (ASP) and then ASP.NET based applications. Apache on the other hand embraced open source scripting systems, like Perl and PHP, from the beginning for it's dynamic web pages. In order to compete Microsoft has added support for these common scripting system. In the long run the argument as to which is better, Apache or IIS, is just like the classical argument that Ford or Chevy makes better cars. Some designers prefer Microsoft Windows with IIS and other prefer Apache. If you find that one platform is not meeting your needs we will be more than happy to switch you to the other.

Security is a major concern for web hosting providers, web hosting customers and end users. Many times the problem is not with the hosting platform, but rather with the hosted application. The black hats - Hackers are working around the clock, trying to gain access to websites in such a way as to allow them to deface them or force end users to install malware. Those who wear white hats on the other hand are working day and night to prevent hackers from gaining a toehold in any of our systems. The problem is that hackers only have to be lucky once, the goods guys need to be lucky 100% of the time, an almost impossible task.

Both platforms have had numerous security patches over the years and will continue to do so as new exploits are brought to light. Microsoft has taken major steps with Windows 2008 and IIS 7.x to make the platform more secure. According to a third party report by Secuna, Apache 2.2.x had 8 advisories in 2011 while IIS had none. This statistic does not tell the full story though as it does not include the underlying operating system or 3rd party applications, where the majority of exploits take place.

Both platforms have additions security features like Software Firewalls and Application Firewalls. You can also protect your databases with SQL Firewalls. As you can see below, both platforms offer similar security features and options. Some of the features listed below are only available on specific Virtual or Dedicated Servers.

It is a best practice to not only secure your web server, using a layered approach, but to also make sure the applications and scripts you are using are up to date and written to prevent common security flaws. Critical data, which can include identifying information like login id's, password, names, addresses, phone numbers, social security numbers, etc. should always be encrypted. Running an out of date application or script with security exploits in it is a guarantee that your website will be hacked.