ASP.Net – Web Server’s Role

Varinder Sandhu .Net Framework, ASP.Net, Varinder Sandhu

The web server provides the content and the web browser displays it to the user. At the simplest, a web server sends static files, such as static HTML or image files, through an HTTP connection to a web browser.

Modern web servers do far more, however. When a web server receives a request, some of the actions it takes are to:

Verify that the request is structured legitimately. Sometimes, malicious clients send malformed web requests to compromise web servers. Web servers must be able to detect this and respond appropriately—usually by ignoring the request.
Authenticate itself. If the server has a Secure Sockets Layer (SSL) certificate and the request was made with HTTPS, the web browser uses the certificate to authenticate the server. The web server will also encrypt all content before returning it to the web browser.
Authenticate the user. If the content requires authorization, the web server verifies that the user has submitted credentials. If the user has not been authenticated, the web server redirects the user to an authentication form.
Authorize the user. After the Web server authenticates the user, the web server verifies that the user is allowed to access the requested content.
Determine how to handle a request. If the web browser requested static content or was simply determining whether cached content could still be used, the web server can directly respond. If the web browser requested an ASP.NET page, the web server must forward the request to ASP.NET.
Handle errors. If a server cannot process the user’s request, it provides error information to the web browser.
Cache output. Web servers can cache output to improve the response time of subsequent requests. Web servers also provide caching information to web browsers, so browsers know how long to keep content cached.
Compress output. Before returning a page to a web browser, a web server can compress the content to reduce the bandwidth required.
Log access. Web servers typically record usage information for security and performance-monitoring purposes.