WHS as a Webserver/Gateway/Everything Else

The final major task of WHS is to act as a webserver and gateway computer to the internet. Many people want to be able to access their files outside of their private network and WHS offers the ability to get this done and more.

As we mentioned previously, WHS comes with a very locked down version of IIS 6.0 as the webserver software. Enthusiasts looking to use a WHS server as a full-fledged webserver will be disappointed to find that out of the box the webserver abilities are limited to a web interface of some of the previously mentioned features of WHS. While we'd imagine this is quite possible to work around, it's not something that can be done inside of the WHS console.

In this respect, most of the webserver abilities of WHS are mentionable for being unmentionable. When the remote access option is enabled (it's disabled by default) accounts that have been flagged as having the rights to use remote access and are using a strong password may log into the web server. The entire transaction is encrypted, which as of this point is actually problematic because the security certificate doesn't (and can't) match the server, throwing up certificate warnings when attempting to log in. Since we're using the release candidate, we're not sure how this affects the release version at this point.

Once logged in, a user is presented with a few options. The first and most useful of these is accessing all the shared folders that user has access to. This entails both uploading and downloading of files via an HTML interface, basically replicating the feature set available as if it were done via a Windows share. While this is a useful feature we also feel Microsoft has missed a massive chance to do more with webserver access of the shared folders. For example, why not make the Photos folder a special photo gallery folder where photos can be viewed and manipulated as they can with other internet photo gallery services? It would certainly make sharing photos with the relatives easier.

The other ability users gain when logged in is using the WHS server as a fully HTTPS-encapsulated gateway for RDP. With the right passwords, users can log into the RDP console interface for the server itself, or the server can relay RDP controls to any clients on the network that are connected to the server and capable of acting as an RDP server (some versions of XP and Vista). We're a bit at odds with this second feature because it's so strange. It makes sense to offer RDP access to the server itself for management of the server and the network, but we don't immediately see the utility of being able to RDP into everything else. Certainly it's a nifty feature and we'll keep it, but we don't see it being very useful to all but a handful of users. How many people actually run a version of Windows that's RDP-server capable, after all?

This also brings up the security aspect of the remote access feature, which is something that can't be easily dismissed. The fact that Microsoft is encouraging users to purposely expose a computer to the internet with an active service, while necessary to enable the features offered by remote access, troubles us all the same. As the only thing exposed (if everything is configured correctly) are the ports required for IIS and not the more vulnerable Windows sharing services, this is potentially very secure as IIS 6.0 has had very few problems over the years. But at the same time we're worried about how many servers and routers won't be configured correctly, and what may happen when the next IIS exploit is found.

Is the version of IIS 6.0 locked down enough to keep it from being a participant in the next Code Red worm? If Microsoft is successful with WHS, there's going to be a massive increase in the number of IIS webservers on the internet, and that opens the possibility for major trouble if any exploits are found right after a patch Tuesday. Then again, we don't have any idea of how many users would be able to even access their server from the internet; blocking ports 80 and 443 are popular activities with ISPs.

On a lighter note, Microsoft is offering their own dynamic domain names for WHS owners who do use remote access and want something easier to remember than an IP address. Microsoft recently picked up the homeserver.com domain, and WHS owners will be able to reserve a subdomain for themselves that the WHS software will keep updated. It's a small feature among the whole, but we'd call it important in making WHS more usable with the average home user. We're still not ready to call these remote access features more than an interesting side show, but it does tilt things slightly more in favor of WHS.

Finally, Microsoft has taken an interesting approach with WHS when it comes to dealing with the shortcomings of the product. Microsoft has included an SDK for WHS for developing a new class of applications Microsoft is calling add-ins. Add-ins allow the server to do new things such as new services for clients, for the remote access component, or a new GUI. Among those developed for the release candidate, we have seen add-ins for a BitTorrent client, connecting TiVos, and using wake-on-LAN for clients that are turned off.

This will be something that we'll definitely need to keep an eye on, as add-ins could potentially resolve a lot of our complaints with WHS. We should have a better idea of what these add-ins can do (and do well) once Microsoft's Code2Fame contest for creating add-ins comes to a close and the add-ins are released. It's unusual for Microsoft to be interacting with the development community on this level, so we're interested to see how things turn out.

WHS As A File & Media Server, Cont Performance Data
Comments Locked

128 Comments

View All Comments

  • ATWindsor - Sunday, September 9, 2007 - link

    All NAS-boxes have horrible performance. (at least all I have seen). It hardly seems fair to use benchmarks from them, when this is a "Proper" computer, there are plenty of benchmarks from software raid 5 run on "real" computers to find, see this for instance:

    http://www.tomshardware.com/2004/11/19/using_windo...">http://www.tomshardware.com/2004/11/19/...appen/pa...

    MDADM is as far as i know even faster, hower for whs it would likely be built on the software-raid of win2003.
  • Gholam - Sunday, September 9, 2007 - link

    All NAS-boxes have horrible performance.

    Wrong. Proper NAS boxes have superb performance. Look at NetApp FAS270 for example. Of course a FAS270 in a typical configuration will run you in the $20,000-30,000 range.

    That Tom's Hardware test is running a 2.8GHz CPU. http://www.pcpro.co.uk/reviews/121499/tranquil-t7h...">This WHS box is running a 1.3GHz VIA C7, for example.

    Also, WHS is designed to be easily and transparently expandable by end-user using external drives. Please show me a RAID setup of any kind that will work in a mixed ATA/SATA/USB/FireWire configuration with drives of varying sizes.
  • ATWindsor - Sunday, September 9, 2007 - link

    Ok, all consumer NAS-boxes then, I thought that much was implicit. It doesn't matter anyway, the point is that your comparison to a box like that isn't very good when it comes to "proving" that software-raid automatically has bad performance.

    A lot of boxes with WHS will be using a CPU that is better than a 1.3 Via, if the hardware isn't suited for the job, then you just don't run a software raid5, it's that easy.

    I don't see how the WHS storage-pool is incompatible with raid as a concept, a raid-array presents itself as a single drive, more or less, wich can be merged into the storagepool if one feels like it.
  • Gholam - Monday, September 10, 2007 - link

    Infrant ReadyNAS NV+ is a consumer level NAS. However, it's built on an SBC running a 1.4GHz Celeron M ULV, and in actual testing outperforms many self-built systems. On the other hand, it also costs over $1000 without drives.
  • ATWindsor - Monday, September 10, 2007 - link

    The benches I have seen points to a read-performance of 30 MB/s give or take lets say 10 MB, thats hardly good performance, it doesn't even outperform a single drive. One can easily build a software raid with several times better speed.
  • Gholam - Sunday, September 9, 2007 - link

    WHS is made to run on low-power, low-end and old hardware; calculating parity blocks in software is bad enough on a modern desktop CPU, an old PIII/800 or a VIA C3/C7 (present in some OEM WHS box implementations) will get murdered.

    In addition, recovering data from a failed RAID5 array is quite difficult, requiring specialized (and expensive) software as well as user expertise. Recovering data from a failed WHS box with duplication is as simple as mounting the drives separately.
  • ATWindsor - Sunday, September 9, 2007 - link

    The raid will not fail before two drives goes down, if that happens in WHS, you still need to run recovery-software and hope to get out data. WHS will be run on diffrent kinds of systems, even the cheapest of CPUs today are pretty powerful. More than powerful enough to get reasonable spped on raid5. Why limit WHS in this way? That is exactly the problem I'm adressing, the lack of flexibility, the reasoning that all WHS-users have the same needs, I think a pretty large number of WHS-machines wich poeple build themself will have performance several times higher then a P3@800, if not most.
  • Gholam - Sunday, September 9, 2007 - link

    The raid will not fail before two drives goes down

    Oh how I WISH that was true. Let me give you a recent example I've dealt with. HP/Compaq ProLiant ML370G2 with SmartArray something (641? don't remember) running a 4x36 RAID5 array, Novell Netware 5.0. DLT VS80 tape backup drive. Worked for 4 years or so, then the tape died. Took the organization in question 4 months to buy a new one, LTO-2 - which means they've had 4 months without backups. Downed the server, connected the new tape, booted - oops, doesn't boot. Their "IT guy", in his infinite wisdom, connected the tape to the RAID controller, instead of onboard SCSI - which nuked the array. It didn't go anywhere, the controller didn't even report any errors, but NWFS crashed hard. They ended up rolling back to 4 months old backups because pulling data out of a corrupt RAID5 array would've cost several thousands.

    I work for a small company that specializes in IT outsourcing for small and medium businesses - basically shops that are too small to afford a dedicated IT department, and we give them the entire solution: hardware, software, installation, integration, advisory, support, etc - and I've got many stories such as this one. We also deal with home users, but not as much.

    This said, I don't consider RAID5 a suitable for home use, at least not yet. It's too expensive and dangerous - mirroring files across a bunch of drives is cheaper and easier. Also, as far as I understand, when a drive in WHS drive pool fails, it automatically syncs protected folders into free space on remaining drives, so the window where your data is vulnerable is quite small. RAID5, on the other hand, will be vulnerable until you replace the drive (which can take days or even weeks) and then until it finishes rebuilding (which can also take a very long time on a large array). You can keep a hotspare, but then you'll be eating up another drive - in case of 4 drives, RAID5+hotspare eats you the same 50% as RAID1/RAID10 - while WHS mirroring makes your entire free space function as hot spare.
  • ATWindsor - Sunday, September 9, 2007 - link

    Hardly a very plausible scenario for a home user, of course a RAID can go down if you mess it up, but you can just as easily mess up non-raided drives to the point that running recovery-software is needed, when it comes to normal drive-failiures two of them have to die.

    If you only need 2 Drives worth of storage, you might as well mirror, but when you need for instance 10, it adds up, but drive-cost, electricity PSU-size and physical size (especially if you want a backuo-machine in adition, I would never keep my data on only one computer like that). If the syncing is going to work,you also need to have at least a disk of usalble free space, so you basically need to "waste" a whole disk on that to if you wnat to get hot-spare-functionality.



  • Gholam - Monday, September 10, 2007 - link

    Hardly a very plausible scenario for a home user, of course a RAID can go down if you mess it up, but you can just as easily mess up non-raided drives to the point that running recovery-software is needed, when it comes to normal drive-failiures two of them have to die.

    Not quite. WHS balances data between drives, so if one of them becomes corrupt and one of the copies of your protected data is gone, you can still access it on the other - no extra tools required, just mount the drive in a Windows system. You will only lose it if both drives become corrupt simultaneously.

    If the syncing is going to work,you also need to have at least a disk of usalble free space, so you basically need to "waste" a whole disk on that to if you wnat to get hot-spare-functionality.

    Again, not quite. Since you protect the data on a per-folder basis, your free space requirement depends on the actual amount of data you're keeping redundant, not the total, and there's little point in wasting redundant storage on backups - they're redundancy in and of themselves.

Log in

Don't have an account? Sign up now