What are the (dis)advantages of using Cassini instead of IIS?

Viewed 15728

I've found that on some occasions I can edit the source while debugging. Are there any other advantages of using the Visual Studio built-in webserver instead of a virtual directory in IIS?

I'm using Windows XP on my development environment, and a local instance of IIS 5. I work on several projects, so I use multiple virtual directories to manage all the different sites.

Are there any disadvantages?

28 Answers

The built-in web server for Visual Studio is called Cassini and here are a few of its limitations...

  • It can host only one ASP.NET application per port.
  • It does not support HTTPS.
  • It does not support authentication.
  • It responds only to localhost requests.
  • It is slow startup compared to IIS

All the previous responses are great answers - here's one gottcha with Cassini that might require IIS on the destkop.

Cassini runs in the context of the developer, not as the IIS user (IUSR_, IWAM, or in WinXP x64, the w3wp process). This can be a bit painful if you've got a web site that is accessing external files or creating temp files. It is most evident when your developer is running as an Admin of their desktop.

When you move to the server IIS, something that you would have had access to in Cassini doesn't work the same. CACLing with the IIS_WPG usually is all it takes to fix, but if your developer is not thinking about this, they will quickly get quite frustrated with their deploy.

Cassini does not support virtual directories.

The built-in server works well for larger corporations that don't want to give developers any administrator access on their own machines to configure IIS.

The Visual Studio web server is less forgiving about // in the path.

It will refuse to serve a link like http://localhost:52632/main//images/logo.jpg where IIS will do.

That's pretty obscure, but it means we have a lot of fixing to do to get rid of all the // occurrences.

Another disadvantage I've run into is on a Forms authenticated website using custom IPrincipal/IIdentity. Cassini will switch the AppDomains without warning (or notice).

Check this blog post for more.The headache on this made me drop Cassini and stick with IIS.

  • You need to have Visual Studio running to use it (under normal circumstances)

  • It only responds to localhost, so you can't give the link http://simon-laptop:37473/app1 to a friend to view your site over the network

  • Big disadvantage: it's harder to get fiddler working, because localhost traffic isn't sent through the proxy.

Using http://ipv4.fiddler:37473 is the best way to get Fiddler working with it.

If you 'web reference' the URL for web services that are on the built-in webserver, the port might change. Unless you have set a "Specific port" mentioned in menu ProjectProperties options page.

This is something I've gotten used to now. I always set a specific port. Now when sometimes the webserver crashes (I've had that happen), I simply change the port number, and all is well. I reckon restarting will also fix this.

The built-in server means the developer doesn't have to know how to set up IIS to test their site.

You could argue this is a disadvantage, and that a Windows developer should know at least that much IIS. Or you could argue that a developer who isn't a system administrator shouldn't be messing around with the web server at all.

Cassini also does not support ASP Classic pages. This is only an issue for legacy projects where old ASP Classic pages still exist (like our web application at work).

If you do hobby work at home using XP Home, you can't install IIS locally.

The built-in server isn't as configurable, and it runs on an odd port, so if you're counting on specific behavior it can be troublesome.

I often take the best of both worlds and create an application in IIS, and use the built-in web server for more efficient debugging.

Cassini is meant to be a lightweight test webserver. The idea is that a developer does not need to have IIS installed and configured to test his/her application.

Use IIS if you are familiar with it and you have it set up and your box can handle it. Cassini is not meant to be a replacement.

When you use IIS in Vista or Windows 7 with UAC enabled, you must run Visual Studio with administrative rights. If you do this, you can't drag an drop from your shell to Visual Studio (even if you run an instance of explorer.exe as administrator).

For this reason I use Cassini for most projects.

FYI, Windows XP 64-bit comes with IIS 6.

Install IISAdmin, and you can setup separate sites in IIS 5, instead of using virtual directories.

The built-in webserver is a little less robust than IIS, but requires no setup so it is just a tradeoff.

You may not always want your development projects exposed on your IIS server (even your local IIS server) so the built-in server is good for that.

However, if your application is going to access resources outside of the norm for a web app then you may want to debug frequently in IIS so that your app will run with restricted permissions and you can see where the pain points will be.

We've also seen some issues with Visual Studio built-in server regarding some third-party controls which put their scripts in the \aspnet_client folder.

Since the folder isn't there when you're not running under IIS, the controls didn't work. It seems a lot simpler to always work with IIS and avoid strange problems.

One difference I've found is that the development server handles uploading files differently than IIS does. You can't trap the error if the file being uploaded is bigger than your Max_File_Size setting. The page just dies and returns a 500.

Another dis-advantage is that it sends every request through the gloabal asax file which includes all requests for images and stylesheets. This means if you have code in there which does things with the file names, such as a look up, then the auxillary files willget processed too.

If your project resides in the IIS directory you can still edit code. It just depends if it has been published or not.

You will run into so many issues on the Cassini vs. IIS when you are debugging certain permission based scenarios, like Kerberos and NTLM authentication as well as issues like server compression, etc. All in all, the Cassini is still okay to develop with, but make sure you do extensive testing when publishing to IIS.

Related