260 likes | 420 Views
Presenter Allen-Green C.L. Huang Microsoft Student Partners, Taiwan ; MCITP Graduated School, Information Management, TKU CEO, IMNA. The Overview of Servers. Contact Me. Outline.
E N D
PresenterAllen-Green C.L. Huang Microsoft Student Partners,Taiwan ; MCITP Graduated School, Information Management, TKU CEO, IMNA The Overview ofServers
Outline Introduction- Early Computers- Recently Servers- Cloud TechnologyConcept of Internet- OSI 7 Layer- TCP/IPClient/Server Architecture- Client-side- Server-sideServer Applications and Setting- Apache HTTP Server- Filezilla FTP Server (Windows)Security- Weakness- Protection
History of Computers • Pascal, 1962; Mark I, 1642 • ENIAC, 1946 • x86 8086, 80186, 80286,80386, 80486 • Pentiun, IA32 • IA64 vs AMD 64 ENIAC. Fig from Wiki
Early Servers • IBM Mainframe • Computer / Terminal An IBM 704 mainframe (1964). fig from Wiki
Recently Servers • Server • Workstation (Multi-core, SCSI) • PC • Hand-hold Devices IBMz9. fig from Wiki
Huge Servers • Super Computer (IBM Mainframe) • Cluster Computing • Grid Computing • DistributionComputing • Cloud Computing
Cloud Technology • IaaS (Infrastructure as a Service) • Data-as-a-Service(DaaS) • Amazon (EC2), Google App, VM vCloud • PaaS(Platform as a Service) • App-engine, Apache+PHP+MySQL, IIS+ASP.NET • SaaS(Infrastructure as a Service) • Gmail, Docs, Flickr
OSI 7 Layer Reference from http://www.tech-faq.com/osi-model.html
TCP/IP • TCP • IP (IPv4, IPv6) Reference from http://www.csie.ntu.edu.tw/~b6506066/Micro2/tcp_ip.htm
IP Datagram Encapsulation Reference from http://www.tcpipguide.com/free/t_IPDatagramEncapsulation.htm
IP Header Reference from http://dns-learning.twnic.net.tw/internet/intro6.html
TCP Header Reference: http://www.csie.ntu.edu.tw/~b6506066/Micro2/tcp.htm
Client/Server Architecture Reference from http://en.wikipedia.org/wiki/File:Client-server-model.svg
WebSite Yahoo,Google,etc. Browse Display Browser IE,Chrome,Firefox
WebServer Apache,IIS,Tomcat Request Response Client Browser,FlashGet,PPS,KKBOX
Server OS • Unix-like (Free BSD, CentOS, Mac Lion) • Windows (Server2003, Server 08R2)
Server Application Software • HTTP Server (Apache, IIS) • FTP Server (PureFTP, Filezilla) • Mail Server (Sendmail, Exchange Server) • DNS Server • BBS Server (Maple) • Uniform Server (Dev by yourself) • Use Stable Release
Apache HTTP Server • Install on Win/Unix-like • download tar/msi file http://httpd.apache.org/ • Fillwithlocalhost/localhost/123@123 • yum or install • Directory Concepts • .htaccess / httpd.conf file configuring • http://inspire.twgg.org/c/internet/host-setting/apachea39s-httpdconf-file-to-set-arguments-detailed.html • http://www.htaccesseditor.com/tc.shtml • Multiple site
Filezilla FTP Server • Server version only available on Windows • http://filezilla-project.org/ • Permission setting • Directory Concepts
Network Security • Software • OS • App • People • Server Administration • Developer • User
Most Weakness • 0Day • SQL Injection • XSS • CVS Content FilesCross-Site Request ForgeryDatabase Server Error Message • Password Field Masked • Backup File • Directory Listing • Logins Sent Over Unencrypted Connection • Apache Account Information Disclosure • Secure Section Only Accessible Via SSL • Possible Username or Password Disclosure • Admin Section Require Authentication • Guestbook.pl Server-Side Include Command Execution
Protection • Patch! Patch! Patch! • Security Awareness • Developer in Security • addslash() functions, session management • Server Management
Reference, Q&A • 淺談雲端運算 • http://www.cc.ntu.edu.tw/chinese/epaper/0008/20090320_8008.htm • http://www.zdnet.com.tw/news/software/0,2000085678,20138391,00.htm • http://zh.wikipedia.org/wiki/IP%E5%9C%B0%E5%9D%80 • http://www.tcpipguide.com/free/t_IPDatagramEncapsulation.htm • http://newsletter.ascc.sinica.edu.tw/news/read_news.php?nid=1357
Pic Reference • http://www.eveonlinereview.com/eve-server-upgrade/ • http://arrowquick.com/blog/2010/12/23/repurposing-old-servers-part-one/ • http://support.morehouse.edu/whatis-network/ • http://www.jonlee.ca/an-optimal-server-configuration/