Page 1 of 1
Apache Vs IIS
Posted: Tue Jan 05, 2010 9:31 am
by dude81
Can somebody give some good links, that support Apache more over IIS7, so that I can push Apache based hosting for a clients requirement for a project. All I found is a link of this
netcraft
Re: Apache Vs IIS
Posted: Tue Jan 05, 2010 12:10 pm
by flying_circus
Why do you desire apache based hosting? What benefits does it provide you and your project?
Sometimes you have to give the customer what they want, as long as it meets the requirements of the project.
I'm a tightwad, so unix based hosting makes the most sense from a pricing stand point.
Re: Apache Vs IIS
Posted: Wed Jan 06, 2010 5:55 pm
by volomike
This should do it. Here's a map of IIS versus Apache system calls. Now, granted, the map is a little old, but I can guarantee you that a recent diagram of the latest of both would not show much change.
http://i.zdnet.com/blogs/SysCallApache.jpg
http://i.zdnet.com/blogs/SysCallIIS.jpg
A really informative blog on the ComputerWorld website spelled it out like this:
"The more system calls, the greater potential for vulnerability, the more effort needed to create secure applications."
The rest of that article is here:
http://blogs.computerworld.com/node/2291?source=NLT_AM
And don't forget the Code Red virus that walked right on through IIS security and how long this thing lasted in the wild. Apache may have had its share of exploits, but all they could do was run in the privilege of the web server account, which was not much. As well, Code Red has far outlasted any web server virus ever known -- even outlasting any issues on Apache by several years. In fact, there are probably a few servers still out there infected with Code Red or Code Red II.
Last, I routinely find problems when I download open source packages and try to install them on WAMP instead of LAMP. They just aren't tested for WAMP enough. PHP on Windows is an afterthought, in my opinion.