SSL Installation Automation

Some customers who have been with us for a while may have noticed that we recently automated the SSL installation process.  The user interface didn’t really change much BUT we put in several months of work under the hood to make this work.

When we first set out to do this, we thought it would be a piece of cake. Once we dove into the details, it turns out that automating SSL installation was one of the more complex projects we have ever worked on.  Why is this?

1. Limited documentation.  It turns out that not many people have tried to programmatically manage SSL certificates and there was very little help found anywhere on the web.

2. Different Certificate Vendors provide the certificate in slightly different ways.  For example, some Certificate providers will provide you a file with the cert/intermediate/root. So, this posed a huge challenge.

3. Getting this to work on both IIS6 & IIS7.

After several months of grueling work, I am happy to report that SSL installation is now automated. From the time you auto-generate the CSR to getting the certificate installed, you can now get HTTPS to work on your site in mere minutes. Of course, this also depends on how fast you can purchase the certificate and get the certificate.  But before this, it could take us up to 24+ hours just to install the cert so this is a big win for all of us.

Frank Chueng
CTO

Creating an ADO.net Data Service

For the purposes of this demonstration we are using:

IIS 7.0, MS SQL 2008, Visual Studio 2008, C#

ASSUME VARIABLES:
$DASP_SQL_SERVER = tcp:sql2k801.discountasp.net
$DASP_SQL_DB_NAME = SQL2008_99999_nw
$DASP_SQL_USER_NAME = SQL2008_99999_nw_user
$DASP_PASSWORD = somepassword

//Set Up Northwind Database
1) Download the Northwind database sample from Microsoft

2) Attach the Northwind database to your MS SQL 2008 Server on DASP
– Make sure you can connect from MS SQL Data base manager
– Copy the connection string supplied for later use.

3) Open VS2008, Create new web project

4) Create Data Connection
– In the “Server Explorer Tab”: Right-Click[Data Connections]->Add Connection
– Enter Server name:$DASP_SQL_SERVER
– Select “Use SQL Server Authentication”
– Enter Username/Password: $SQL_USER_NAME, $DASP_PASSWORD
– Choose Radio Button “Select or enter a database name”
– From drop down box select: $SQL_DB_NAME
– Click: “Test Connection” button. (Sensure connection succeeded).

//Set up a Entity
5) In “Solution Explorer” tab Righ-Click[Web Project]->Add New Item
– Select: ADO.NET Entity Data Model
– Name it NorthWindModel.edmx
– Next > Select “Generate From Database”
– For Which data connection find the DASP connection in the drop down box
– Select: “Yes, include the sensitive data in the connection string”
– Name: NorthWindEntities (NOTE that “I” is missing from WND in the db name)
– Next> Select the “Customers” table from the db.
– For “Model Name Space” enter “NorthWindNameSpace”. Finish >
– Click on the “NorthWindModel.edmx” page which shows the DB fields
– Jot down the “Entity container Name” in the properties box in the bottom left
– It should be: “NorthWindEntitites”
– This will create a connection string in web.config (replace password characters with “*”):
<add name=”NorthWindEntities” connectionString=”metadata=res://*/NorthWindModel.csdl|res://*/NorthWindModel.ssdl|res://*/NorthWindModel.msl;provider=System.Data.SqlClient;provider connection string=&quot;Data Source=tcp:sql2k801.discountasp.net;Initial Catalog=SQL2008_99999_nw;Persist Security Info=True;User ID=SQL2008_99999_nw_user;Password=******;MultipleActiveResultSets=True&quot;” providerName=”System.Data.EntityClient” />

//Set up the Service
6) In “Solution Explorer” tab Righ-Click[Web Project]->Add New Item
– Select: ADO.NET Data Service
– Name: NorthWindDataService.svc. ADD >

7) Open WebDataService.svc.cs
– Modify the WebDataService class to look like this:

public class NorthWindDataService : DataService<NorthWindEntities>
  {
    public static void InitializeService(IDataServiceConfiguration config)
      {
config.SetEntitySetAccessRule("*", EntitySetRights.All);
config.UseVerboseErrors = true;
      }
    }

8 ) Open Web.config and replace your service model tag with (but change the DOMAIN!):

<system.serviceModel>
  <serviceHostingEnvironment aspNetCompatibilityEnabled="true">
    <baseAddressPrefixFilters>
      <add prefix="http://YourHostedDomainName.com"/>
    </baseAddressPrefixFilters>
  </serviceHostingEnvironment>
</system.serviceModel>

9) Right click Web project folder -> Publish to DASP using FTP
– Use FTP address and FTP username (See DASP Control Panel->Account Management->Account Info)
– Ensure you use the right FTP address!

10) Start the IIS 7 Manager.
– Connect to IIS 7 on DASP
– In IIS click “Authentication”
– Disable anonymous.
11) Point to: http://YourHostedDomainName.com/NorthWindDataService.svc
– You should get an xml page.
– Query customers with by pointing to: http://YourHostedDomainName.com/NorthWindDataService.svc/Customers()

For continuing discussion on this article please see this forum thread.

Special thanks to guest blogger, Rob Leclerc, Ph.D.

Web 2.0 Expo 2009

I went to the Web 2.0 Expo for the first time in San Francisco last week. I’ve been going to so many Microsoft conferences that I thought I should branch out a little and see what was going on at other conferences. This particular conference was interesting to me as we have made getting more active with Web 2.0 technologies a priority this year. (For example, people can follow us on twitter.)

This year’s theme was “The Power of Less” and it was appropriate as we are in a global economic downturn and we all must make the best of it with less. But even running ones life or ones company/organization with less, Social Media and Web 2.0 technologies can be used in powerful ways to stay connected with people and customers. We are definitely in the midst of a transformation.

Some observations/thoughts/random blabbering:
1. The keynotes were much shorter, running about 15-20 min, and more rapid fire than the long 1-2 hour keynotes at Microsoft conferences. You got a lot of different flavors of thinking about and approaching Web 2.0. The drawback was that there were speakers that just ran out of time.

2. The Web 2.0 crowd are quite creative. Different from the usual “speaker”, “exhibitor”, “staff” tags that you find on typical conference badges, they had a side table with a bunch of creative tags and people had a bunch of them all strung together. They even had a blank one where you can make up your own tag. I saw many conversations between strangers start over them. They had tags like “Twitter Addict”, “Social Media Freak”, “WebOps”, “HIRE ME”, “Stealth Mode” …etc. in addition to the ones pictured below.

3. The conference bag was a cool collapsable bag that I will keep in my car and reuse in the future. Props to a simple, non-bulky, reusable conference schwag bag.


4. I really appreciate the effort of reducing waste at this event. The conference bag had materials in it but wasn’t stuffed to the max with collateral and schwag that usually goes straight to trash. They also encouraged attendees to recycle the badges after the conference.

5. There was a side Web2Open “un-conference” going on simultaneously. They had two separate discussion areas with chairs and whiteboards and a central whiteboard calendar schedule. Anyone can come up and volunteer to lead a session or a discussion on any topic and slot a time. For example, there were sessions to practice your pitch and get critiqued as shown below. There were sessions to continue discussing a presentation….etc. And the “un-conference” had a lot of participants.

6. There were many businesses, organizations, and marketers in attendence who were grappling with how to use social media effectively for their organizations. Discussions and presentations tried to address some of these issues from business cultural adoption of Web 2.0 to how to measure effectiveness of Web 2.0.

7. Part of the conference dealt with the idea of “mobile first”. With the proliferation of mobile devices (which are really turning into the MOST personal computer that someone has with them at all times) will change the way people interact with a brand. And it may very well be that the mobile experience will be the very first way a person interacts with your brand/company. Applications are now changing as new mobile devices have eyes (camera), ears (mic), skin (multitouch), and gps.

8. For the most part, I didn’t feel like the presentations were a big sales pitch, like many of the other conferences that I’ve been to previously. Most of the talks did a good job presenting big ideas, trends, and observations, but a person seeking some step by step method of adopting Web 2.0 within their organization was out of luck. What was typically presented was more of strategic ideas, directions, or guidlines, but it was up to the particular organization to figure out how to implement these ideas and how to measure their success.

9. Tim O’Reilly interviewed Stephen Elop, President of Microsoft Business Division, during the first keynote and he sorta let out that we may be seeing some Microsoft Office stuff coming to the iphone. There were some news generated from this.

10. I did attend two company sponsered talks by both Salesforce.com and RackSpace, who talked about Cloud Computing and how IT is being transformed. I’ve been hearing a lot of the Cloud discussions direct from Microsoft and from analysts, so it was good to hear an actual Cloud service providers take on the Cloud, even though some of it was a sales pitch. The RackSpace presentation was done by Chief Strategy Officer Lew Moorman, who was named President of Rackspace Cloud Division that very morning.

11. There was a talk where a Venture Capital guy mentioned that it was important to build a strong loyal community and then figure out how to monetize. This seemed odd to me especially in the current economic situation. To me, it would be important to have a pretty clear idea of how you are going to monetize a business, before embarking on the startup. I think the days of just jumping in and figuring how to make money later are over. As powerful of a tool that I think it is, Twitter is still trying to figure out their revenue model.

12. In the conference slides, they pretty much all started out posting the conference session and speaker’s twitter addresses. While the talks are happenning, a large portion of the audience are thumbs-on with their mobile devices. As a speaker, you just have to get used to doing presentations to an audience with their heads down, I guess. After the sessions, people can go up to mic in the aisles to ask questions, but the speakers also took questions via twitter. In fact, Tim O’Reilly even had a laptop on stage while interviewing guests during the keynote and took questions via twitter.

13. Many of the agency and consultants that presented, wisely noted that it was important for a business to step back and ask why they want to use a specific web 2.0 technology and what was the purpose? Not every Web 2.0 type of technology is appropriate for every type of business or business need. So it was important to really think through what a company wants to accomplish before embarking on using such technologies. Also, they advised that companies should just choose and focus on a few Web 2.0 strategies rather than try using everything Web 2.0 for their companies.

14. Another theme that appeared in various forms in different sessions was about failure. Does failure matter in a Web 2.0 world? And pretty much all speakers said that you WILL fail with Web 2.0 at sometime. When failure happens, just own it and own up to it, be honest and move on. This will make your company much more authentic. They cited a few examples of business that tried all sorts of Web 2.0-like things and failed miserably just to pick themselves up and try something else out and go through this cycle for years until they figured out a model that worked for them.

15. Tim O’Reilly, announcing being a new grandfather, likened the Web 2.0 concept as being a baby when the term Web 2.0 was coined. And over the years the baby has learned to crawl and just now this baby is starting to walk.

16. Among the tiny url services out there, the conference and most of the presenters were using bit.ly.

Takeshi Eto
VP Marketing and Business Development
DiscountASP.NET

Observational powers

If you’re wondering how focused the people at DiscountASP.NET are, here’s a little example.


See anything odd?

Now the difference may be subtle, granted, but one shoe is blue and one is black. I wore them like this one day and thought, “Well, now everyone will make fun of me, we’ll have a laugh and forget about it.”

But no one noticed.

So I wore them again the next day, and again, no one noticed. So I decided to wear them like this every day until someone did notice. On day five Mike in the billing department said, “Hey, we’re wearing the same…wait a minute…”

So it took five days for anyone to notice. I prefer to think that is not a lack of observation powers, but rather a clear demonstration of how focused on the tasks at hand everyone is.

At least I think that’s what it is…

Free Microsoft Web Deployment Tool Sandbox Hosting Program Upgraded and Extended

DiscountASP.NET partnered with Microsoft to unveil a free sandbox hosting program at the Professional Developers Conference (PDC) 2008. The program was designed to allow developers to get early experience with next-generation web application packaging and deployment scenarios using the Microsoft Web Deployment Tool until March 2009.

Today, DiscountASP.NET announces extending the free Microsoft Web Deployment Tool sandbox hosting program until June 30, 2009 with the latest Web Deployment Tool RC1 that was introduced at MIX 2009.

The free Web Deployment Tool sandbox hosting program is a limited program offered as an open beta on a first come first serve basis. The sandbox hosting account comes with 50 MB of disk space and 50 MB of SQL Server 2008 database space. Interested developers are welcome to sign up at http://labs.discountasp.net.

Microsoft is focused on improving the application deployment experience. First, Microsoft is working directly with software vendors and open source communities to package popular applications and distribute them through the new Web Platform Installer (which I discussed in an earlier post). Second, Microsoft is working on improving their authoring programs and migration tools to make it easier for developers to package their own applications for migration and for distribution.

This free sandbox hosting program is a great way for devlopers to get first hand experience with the Web Deployment Tool and provide their feedback to Microsoft.

Takeshi Eto
VP Marketing and Business Development
DiscountASP.NET

No April fools joke here – Conficker is for real

Have you heard of Conficker? It’s been hard to miss it in the news lately. From the New York Times to 60 Minutes, the virus du jour is making quite a name for itself.

The news is increasing daily because Conficker is on millions of computers, and it is set to accept “new instructions” on April 1st. No one knows what those new instructions may be, but in the world of botnets, instructions are not generally a good thing.

Conficker is primarily spread like many viruses, through email attachments. So of course you should make sure your antivirus is running the latest updates. Internet Storm Center also has a page of scan/removal tools available.

So what is DiscountASP.NET doing about this?

First, we performed a redundant scan of all of our systems, in both our hosting facility and in our offices, using a special scanner made to detect Conficker. Our data center and offices are clean.

Additionally, we use a wickedly effective (and very, very expensive) piece of hardware from 3Com called “Tipping Point.” It is a sophisticated intrusion detection system that stops suspect traffic before malicious packets can reach the servers. It stops literally millions of attempts to send malicious packets to our servers every day. [Note: as of 12/3/2011 we no longer use Tipping Point.]

We are working closely with Tipping Point to ensure that our intrusion prevention system has up-to-the-minute updates of the latest Conficker detection rules.

So…what exactly is going to happen on April 1st?

In all likelihood Conficker is going to attempt to send out email. Lots of it. So we may see an increase in email traffic that slows email service somewhat, depending on the severity of the attack. But again, no one knows for certain what Conficker is going to do. All we can do is be prepared, and urge you to protect your home and office computers as well.

Part III: Microsoft Hosting Summit 2009 – PHP + App Deployment

There was a surprising amount of content on PHP at the Microsoft Hosting Summit. Who would have thought that at a Microsoft Hosting conference, PHP would be front and center as a highlighted topic? There was even one breakout session devoted to discussing PHP on Windows. After trying to fight PHP with ASP for years, Microsoft has changed their tune and is now embracing PHP – trying to get PHP to run as a first class citizen on top of Windows.

However, Microsoft does have their work cut out for them as PHP has built a solid footing in the LAMP stack and it will be very difficult to win over hardcore PHP developers to move to Windows. I know some passionate PHP and Open Source developers that refuse to run any piece of Microsoft software in their home, and even at work if they can help it. That kind of passion is hard to overcome and definitely not the group for Microsoft to focus on.

Part of Microsoft’s strategy is to work with application vendors and open source communities which is a smart move. A big factor in choosing a particular OS for hosting is the users choice of applications. If Microsoft can assist in distributing PHP applications which work on the Windows platform, then it is a win-win for the application vendors as they increase their market share and may even make inroads into the Microsoft developer crowd, while Microsoft can gain more users hosting on Windows with familiar applications. This is part of the idea behind the Web Platform Installer beta 2.0 (WebPI) that was debuted for hosting partners at the Hosting Summit and introduced to the public at MIX 2009.

With the introduction of WebPI, it is going to be interesting to see how this all plays out in the upcoming years. There are some Microsoft partners who are also trying to create their own platform for application distribution too. For example, Parallels has been pushing their APS standard for years. they’ve been working hard to create an application marketplace that integrates with Parallels software and any other systems using the APS standard. Other control panel vendors have also created their own application installation systems as well.

In any case, I think that it is great that Microsoft if focusing on improving the application deployment experience. Any improvement here will be a big win for users and hosts.

Takeshi Eto
VP Marketing and Business Development
DiscountASP.NET

Part II: Microsoft Hosting Summit 2009 – Move Up the Stack?

At the summit, John Zanni, the General Manager of World-Wide Communications Sector for S+S, gave his annual “Hosting State of the Union” presentation.  Of course it was important to address the current economic downturn head-on and while discussing it, John got a good chuckle from the audience commenting that nowadays “Flat is the new Growth.” One area of focus of the talk was in hosted applications. He presented IDC data showing steady growth of SaaS and cited that the current economic situation could actually be an opportunity for SaaS as many companies are looking to cut costs. Focusing on more traditional hosting providers, he presented Tier1Research projections showing steady growth of hosting business, with Shared and Dedicated showing single/double-digit percentage growth and Managed hosting showing ~25% growth over the next several years. He also stated that the Shared and Dedicated hosting business has lower margins and that gaining volume in these segments was tough, while Managed Services on the other hand, represented higher margins and the ability to compete on value. He recommended hosts to move up the stack to managed hosting services where the growth projections are highest. Mr. Zanni did address other areas like the Cloud, Azure, and Microsoft hosted services, but I stop here for a few thoughts.

I’ve heard the recommendation to “move up the stack” many times before from Microsoft, Tier1Research, and other analysts alike. Interestingly, a couple of years ago the recommendation was to move out of Shared hosting and into Dedicated hosting. I even heard some analysts claim that Shared hosting is dead. Of course I do believe that every holster out there should understand the trends of the web hosting industry and that for some hosts, moving into Managed Services is a viable strategy, but I don’t agree that this is a good strategy for all hosts.

First, even at a single or low double-digit percentage growth projected for the Shared and Dedicated hosting enterprise, you are still talking about a multi-billion dollar industry and that kind of growth is nothing to sneeze at. This growth can support many hosts. I think there is room for many different types of hosts for different types of workloads.

I’m not saying that it’s a bad strategy to “move up the stack”, but rather, such a strategy must be thought out carefully as it is very difficult to execute. From my experience, each hosting segment, be it Shared, Dedicated, or Managed Services, requires different types of marketing and sales strategies, has different sales cycles, has different operational support requirements, and requires different type of staff skills.

For many traditional hosts, the Shared hosting business represents the bulk of their customer base and is the “bread and butter” of the company. Refocusing to “move up the stack” can easily mean less attention paid to the very customers who pay the bills. Those Shared hosting customers can miss out on new features and innovations because of the change in company focus. From my experience, it is extremely difficult to juggle staff to support all kinds of hosting segments. Some hosts have even resorted to selling off their lower-end Shared hosting assets to help fund their “move up the stack” strategy.

So despite the recommendations to “move up the stack” to Managed Services, I believe that it is possible to compete on value in Shared hosting. I also believe that it is important to focus on a niche and deliver on innovation within that niche. Our strategy is to “move up the stack” in our own way by continuing to innovate on top of the Windows stack and push forward toward a next-generation shared hosting experience.

Takeshi Eto
VP Marketing and Business Development
DiscountASP.NET