SlideShare a Scribd company logo
10 Performance and Scalability secrets of ASP.NET websitesLessons learnt from scaling a Web 2.0 app to millions of usersOmar AL ZabirChief Architect, SaaS Platform, BTomaralzabir.comomaralzabir@gmail.comTwitter.com/omaralzabirBook “Building Web 2.0 portal using ASP.NET 3.5” from O’Reilly
How to blow up a websiteGet some super fast fiber broadband connection.Run this on couple of quad core desktops:for (int j = 0; j < 100; j ++){  for (inti = 0; i < 100; i ++)  {var client = new WebClient();client.DownloadStringAsync(         new Uri("http://www.microsoft.com/MISReport.aspx");  }Thread.Sleep(500);}
Prevent App Level DOS attackApplication Level DOS attacks are attempts to hit your expensive pages too frequently so that you have 100% CPU and your site goes down. For ex, hitting some expensive Report page continuously.You can run out of ASP.NET Threads and stop responding completely to any request.I’m not talking about Network level DOS attacks like TCP SYN flood or DDOS attacks that hardware firewalls can prevent.Firewalls don’t block legitimate requests.
Prevent App level DOS attacksProtect only expensive pages. Pages that are unlikely to get hit too many times within a short duration.Build a HttpModuleand hook on OnInitevent.Store which IP is making how many number of hits in last 10 minutes. Store the table in some in-memory cache.If the threshold has exceeded, stop responding to that IP. Call Response.End()Solution is here:http://tinyurl.com/omarDOS
ASP.NET ProcessModel OptimizationASP.NET ProcessModel DefaultsmaxWorkerThreads = 20maxIOThreads = 20memoryLimit = 60Nowadays, servers are way too powerful. You don’t need to be conservative.Change default process model setting in machine.config to make best use of CPU power.
ASP.NET Pipeline OptimizationDefault ASP.NET Pipeline has several components that intercept each and every request. Thus they add extra processing overhead on every request.Multiply the overhead by hundreds of requests per second – you get a significant overhead.
ASP.NET Pipeline OptimizationRemove what you don’t need.If you are using Forms Authentication, SQL Server storage, no web.config based role based permission then you can remove most of them:
Prevent large ASP.NET cookies on static contentEach and every request, even static files, get the ASP.NET cookies sent.517 bytes of worthless data per request.Avg pages have 40 resources. 40 x 517 = 20 KB.1M page view = 20 GB of data upload to server.Cookie:.DBANON=w3kYczsH8Wvzs6MgryS4JYEF0N-8ZR6aLRSTU9KwVaGaydD6WwUHD7X9tN8vBgjgzKf3r3SJHusTYFjU85yYfnunyCeuExcZs895JK9Fk1HS68ksGwm3QpxnRZvpDBAfJKEUKee2OTlND0gi43qwwtIPLeY1; ASP.NET_SessionId=bmnbp155wilotk45gjhitoqg; .DBAUTH12=2A848A8C200CB0E8E05C6EBA8059A0DBA228FC5F6EDD29401C249D237812344C15B3C5C57D6B776037FAA8F14017880E57BDC14A7963C58B0A0B30229AF0123A6DF56601D814E75525E7DCA9AD4A0EF200832B39A1F35A5111092F0805B0A8CD3D2FD5E3AB6176893D86AFBEB68F7EA42BE61E89537DEAA3279F3B576D0C44BA00B9FA1D9DD3EE985F37B0A5A134ADC0EA9C548D
Prevent ASP.NET cookies on static contentSetup a new website in IIS, map to the same code folder.Map static.yoursite.com host header to that website.Prefix all css, js, image links with http://static.yoursite.com/Add a Global.asax’sEndResponseevent on the new website.HttpContext context = HttpContext.Current;List<string> cookiesToClear = new List<string>();foreach(string cookieName in context.Request.Cookies){HttpCookiecookie = context.Request.Cookies[cookieName];cookiesToClear.Add(cookie.Name);}foreach(string name in cookiesToClear){HttpCookiecookie = new HttpCookie(name, string.Empty);cookie.Expires= DateTime.Today.AddYears(-1);context.Response.Cookies.Set(cookie);}
System.net optimizationIf you are using HttpWebRequest or WebClient or any other TCP/IP operation, increase the max connection limit.Default is 2 per IP.WCF service calls are limited by this setting.Unless you suspect rogue clients, set some reasonably high number on webservers, but moderate number on desktop clients.
System.net default setting is suboptimalBottleneckMax 2 concurrent calls
ASP.NET Profile ProviderAnonymous Provider creates one anonymous user in database on every first hit to Profile object’s Custom properties:The SP aspnet_Profile_GetProperties gets called when you access Profile object for first time in a request. And this SP is slooooooooow!
ASP.NET Profile ProviderThe slow SP that gets fired when you access custom Profile properties:CREATE PROCEDURE [dbo].[aspnet_Profile_GetProperties]    @ApplicationNamenvarchar(256),ASBEGIN    DECLARE @ApplicationIduniqueidentifier    SELECT @ApplicationId = NULL    SELECT @ApplicationId = ApplicationId                FROM dbo.aspnet_ApplicationsWHERE LOWER(@ApplicationName) = LoweredApplicationName………    IF (@@ROWCOUNT > 0)    BEGINUPDATE dbo.aspnet_Users        SET    LastActivityDate=@CurrentTimeUtc        WHERE UserId = @UserId    ENDEND
ASP.NET Profile ProviderThe slow SP’s execution plan
ASP.NET Profile ProviderDon’t update LastActivityDate when Profile object is loaded. Do it only when Profile object is updated.Update once every hour or so. If LastActivityDate < DateTime.Now.AddHours(-1) then update. No need to do per request or too frequently.Hard code the Application ID to avoid one lookup inside the SP.tinyurl.com/omarGetProp
ASP.NET MembershipASP.NET Membership Provider Stored Procs use default transaction isolation level, which is Serializable.Transaction (Process ID ##) was deadlocked on lock resources with another process and has been chosen as the deadlock victim. Rerun the transaction.Timeout Expired. The Timeout Period Elapsed Prior To Completion Of The Operation Or The Server Is Not Responding.ALTER PROCEDURE [dbo].[aspnet_Profile_GetProperties]@ApplicationNamenvarchar(256),@UserNamenvarchar(256),@CurrentTimeUtcdatetimeASBEGINSET TRANSACTION ISOLATION LEVEL READ UNCOMMITTED;
ASP.NET Membership QueryCommon queries that brings down hell:Select * from aspnet_users where UserName = ‘blabla’Select * from aspnet_membership where Email = “someone@somewhere.com”What’s wrong with these queries?
ASP.NET Membership QueriesLet's look at the indexes: Table: aspnet_usersClustered Index = ApplicationID, LoweredUserNameNonClustered Index = ApplicationID, LastActivityDatePrimary Key = UserIDTable: aspnet_membershipClustered Index = ApplicationID, LoweredEmailNonClustered = UserIDTable: aspnet_ProfileClustered Index = UserIDDO NOT use Email or UserName fields in WHERE clause. They are not part of the index instead LoweredUserName and LoweredEmail fields are in conjunction with ApplicationID field. All queries must have ApplicationID in the WHERE clause.
A love story.NET 3.0 was released, woohoo!WCF!Lambda Expressions!!Linq to SQL!!!Upgraded to .NET 3.0, top to bottom.Major deployment over the weekend.Monday 9 AM, peak traffic.No response from site.
~100% on all web servers
Linq to SQL is not suitable for high volume web applicationsLinq to SQL is not optimized for web application.No disconnected entity support.Entities are not serializable.Linq to sql expressions consume high CPU when compiled to SQL.var query = from widget in dc.Widgetswhere widget.ID == id && widget.PageID == pageIdselect widget;var widget = query.SingleOrDefault();
How bad Linq to SQL is?Source: JD Conley’s blog
Fixing Linq to SQLConvert all queries to Compiled Queries.tinyurl.com/omarLINQ
Linq to SQL transaction deadlocksLarge table, high read and medium write, causes query timeouts, high locks, transaction deadlock because of SERIALIZATION isolation level.Transaction (Process ID ##) was deadlocked on lock resources with another process and has been chosen as the deadlock victim. Rerun the transaction.Timeout Expired. The Timeout Period Elapsed Prior To Completion Of The Operation Or The Server Is Not Responding.using (vardb= new YourDataContext2()) {    db.Connection.Open(); db.ExecuteCommand("SET TRANSACTION ISOLATION LEVEL READ UNCOMMITTED;"); varuser = db.aspnet_Users.First(); varpages = user.Pages.ToList(); }
Linq to SQL transaction deadlocksConnection does not close!Bug in Data Context code.Solution is to override the Dispose.class YourDataContext2 : YourDataContext, IDisposable{public new void Dispose() { if (base.Connection!= null) if (base.Connection.State!= System.Data.ConnectionState.Closed) { base.Connection.Close(); base.Connection.Dispose(); } base.Dispose(); } }
Content Delivery Network (CDN)CDN cache and deliver content from their servers that are closest to users’ computers. The closer servers are to end user, the shorter roundtrip time for every request. For ex, Akamai has servers almost every city in the world.Content from CDN nodes get served faster with lower latency than coming from your servers.CDN Nodes have better caching and compression algorithms.CDN nodes can offload your server and network from delivering static files. Thus better throughput for dynamic content.
Content Delivery Network0.7 secWashington, DC2.2 secAustralia
How CDN worksstatic.yoursite.comwww.yoursite.comHome User
Two types of CDNStatic – you upload the files to CDN and they give you an URL. E.g. yoursite.cachefly.net/logo.gifDynamic – Host your dynamic application behind the CDN. For ex, Edgecast and Panther Express.Very cheap - $0.2/GB
How Dynamic CDN workswww.yoursite.comStatic content cached,Compressed automatically
13 disasters for production websitesFaulty hard drive supplied by supplier, data corruption within weeks. Controller malfunctions and corrupts all disks in the same controller.RAID malfunction.CPU overheated and burned out.Firewall went down.Remote Desktop stopped working after a patch installation.Remote Desktop max connection exceeded. Cannot login anymore to servers.Database got corrupted while we were moving the production database from one server to another over the network.One developer deleted the production database accidentally while doing routine work.Support crew at hosting service formatted our running production server instead of a corrupted server that we asked to format.Windows got corrupted and was not working until we reinstalled.DNS goes down. Don’t get domain from GoDaddy.Internet backbone goes down in different part of the world.http://tinyurl.com/omar13
ConclusionASP.NET out of the box, does not scale for millions of hits.Must make the hacks at code, database and configuration level to get it to scale.That’s reality for any technology, not ASP.NET specific.

More Related Content

PPTX
Scaling asp.net websites to millions of users
PDF
Tips and Tricks For Faster Asp.NET and MVC Applications
PPTX
Microsoft Azure Web Sites Performance Analysis Lessons Learned
PPTX
Building Scalable .NET Web Applications
PPTX
Web api scalability and performance
PPT
Four Ways to Improve ASP .NET Performance and Scalability
PPTX
Sherlock Homepage - A detective story about running large web services - NDC ...
PPTX
Get more than a cache back! The Microsoft Azure Redis Cache (NDC Oslo)
Scaling asp.net websites to millions of users
Tips and Tricks For Faster Asp.NET and MVC Applications
Microsoft Azure Web Sites Performance Analysis Lessons Learned
Building Scalable .NET Web Applications
Web api scalability and performance
Four Ways to Improve ASP .NET Performance and Scalability
Sherlock Homepage - A detective story about running large web services - NDC ...
Get more than a cache back! The Microsoft Azure Redis Cache (NDC Oslo)

What's hot (18)

PDF
Building Web APIs that Scale
PDF
Advanced Asp.Net Concepts And Constructs
PPT
Building An Application For Windows Azure And Sql Azure
PPT
2310 b 15
PPT
The complete ASP.NET (IIS) Tutorial with code example in power point slide show
PDF
Architetture Serverless con SQL Server e Azure Functions
PDF
Drupal Performance : DrupalCamp North
PPTX
ASP.NET Core 1.0
PPTX
Play + scala + reactive mongo
PPTX
Locking and Race Conditions in Web Applications
PPTX
Web Servers(IIS, NGINX, APACHE)
PPTX
Gruntwork Executive Summary
PPTX
Ch 04 asp.net application
PPTX
Asp Net Advance Topics
PPT
Web Servers (ppt)
PPTX
Owin from spec to application
PPTX
Ajax ppt - 32 slides
Building Web APIs that Scale
Advanced Asp.Net Concepts And Constructs
Building An Application For Windows Azure And Sql Azure
2310 b 15
The complete ASP.NET (IIS) Tutorial with code example in power point slide show
Architetture Serverless con SQL Server e Azure Functions
Drupal Performance : DrupalCamp North
ASP.NET Core 1.0
Play + scala + reactive mongo
Locking and Race Conditions in Web Applications
Web Servers(IIS, NGINX, APACHE)
Gruntwork Executive Summary
Ch 04 asp.net application
Asp Net Advance Topics
Web Servers (ppt)
Owin from spec to application
Ajax ppt - 32 slides
Ad

Viewers also liked (17)

PDF
WebSockets with Spring 4
KEY
Web Design Trends - the Do's and Don'ts of using HTML5
PPTX
pengertian distribusi
PPT
Scalability In PHP
PDF
Consuming ASP.NET Web API with WebSockets
PPTX
jChaart - Web Dashboard Framework
PPTX
Building modern web sites with ASP .Net Web API, WebSockets and RSignal
PDF
Test-Driven Infrastructure with CloudFormation and Cucumber.
PPTX
Performance is a feature! - London .NET User Group
PDF
OpenROV: Node.js takes a dive into the ocean
PPTX
State management
PPTX
End to End Security with MVC and Web API
PPTX
Design Practices for a Secure Azure Solution
PPTX
Deploying web apis on core clr to docker
PDF
Developing multi tenant applications for the cloud 3rd edition
PPTX
Running Docker in Development & Production (#ndcoslo 2015)
PPTX
The Velvet Revolution: Modernizing Traditional ASP.NET Apps with Docker
WebSockets with Spring 4
Web Design Trends - the Do's and Don'ts of using HTML5
pengertian distribusi
Scalability In PHP
Consuming ASP.NET Web API with WebSockets
jChaart - Web Dashboard Framework
Building modern web sites with ASP .Net Web API, WebSockets and RSignal
Test-Driven Infrastructure with CloudFormation and Cucumber.
Performance is a feature! - London .NET User Group
OpenROV: Node.js takes a dive into the ocean
State management
End to End Security with MVC and Web API
Design Practices for a Secure Azure Solution
Deploying web apis on core clr to docker
Developing multi tenant applications for the cloud 3rd edition
Running Docker in Development & Production (#ndcoslo 2015)
The Velvet Revolution: Modernizing Traditional ASP.NET Apps with Docker
Ad

Similar to 10 performance and scalability secrets of ASP.NET websites (20)

PPT
IEEE KUET SPAC presentation
PPTX
Asp.net performance
PPTX
10 tips to make your ASP.NET Apps Faster
PDF
ASP.NET Scalability - NxtGen Oxford
PDF
How to optimize asp dot-net application
PDF
ASP.NET Scalability - DDD7
PDF
ASP.NET Scalability - VBUG London
PPTX
Tuga it 2016 improving your application performance
DOCX
High performance coding practices code project
PDF
ASP.NET Scalability - WebDD
PPTX
Extended edition: How to speed up .NET and SQL Server web apps (2 x 45 mins w...
PPTX
ASP.NET MVC Zero to Hero
PPTX
ASP.NET Quick Wins - 20 Tips and Tricks To Shift Your Application into High Gear
PPTX
ASP.NET Best Practices - Useful Tips from the Trenches
DOCX
Why use .net by naveen kumar veligeti
PPSX
06 asp.net session08
PDF
Asp.Net Tips
PDF
Fullstack LX - Improving your application performance
PPT
Migrating To Visual Studio 2008 & .Net Framework 3.5
PPTX
ConFoo 2017: Introduction to performance optimization of .NET web apps
IEEE KUET SPAC presentation
Asp.net performance
10 tips to make your ASP.NET Apps Faster
ASP.NET Scalability - NxtGen Oxford
How to optimize asp dot-net application
ASP.NET Scalability - DDD7
ASP.NET Scalability - VBUG London
Tuga it 2016 improving your application performance
High performance coding practices code project
ASP.NET Scalability - WebDD
Extended edition: How to speed up .NET and SQL Server web apps (2 x 45 mins w...
ASP.NET MVC Zero to Hero
ASP.NET Quick Wins - 20 Tips and Tricks To Shift Your Application into High Gear
ASP.NET Best Practices - Useful Tips from the Trenches
Why use .net by naveen kumar veligeti
06 asp.net session08
Asp.Net Tips
Fullstack LX - Improving your application performance
Migrating To Visual Studio 2008 & .Net Framework 3.5
ConFoo 2017: Introduction to performance optimization of .NET web apps

Recently uploaded (20)

PDF
Optimiser vos workloads AI/ML sur Amazon EC2 et AWS Graviton
PDF
Empathic Computing: Creating Shared Understanding
PPTX
VMware vSphere Foundation How to Sell Presentation-Ver1.4-2-14-2024.pptx
PDF
Network Security Unit 5.pdf for BCA BBA.
PDF
Review of recent advances in non-invasive hemoglobin estimation
PDF
Build a system with the filesystem maintained by OSTree @ COSCUP 2025
PDF
[발표본] 너의 과제는 클라우드에 있어_KTDS_김동현_20250524.pdf
PDF
Spectral efficient network and resource selection model in 5G networks
PDF
Reach Out and Touch Someone: Haptics and Empathic Computing
PPT
“AI and Expert System Decision Support & Business Intelligence Systems”
PDF
Shreyas Phanse Resume: Experienced Backend Engineer | Java • Spring Boot • Ka...
PDF
7 ChatGPT Prompts to Help You Define Your Ideal Customer Profile.pdf
PPTX
Understanding_Digital_Forensics_Presentation.pptx
PDF
NewMind AI Monthly Chronicles - July 2025
PDF
Mobile App Security Testing_ A Comprehensive Guide.pdf
PDF
Machine learning based COVID-19 study performance prediction
PDF
Electronic commerce courselecture one. Pdf
PDF
KodekX | Application Modernization Development
PPTX
PA Analog/Digital System: The Backbone of Modern Surveillance and Communication
PDF
GDG Cloud Iasi [PUBLIC] Florian Blaga - Unveiling the Evolution of Cybersecur...
Optimiser vos workloads AI/ML sur Amazon EC2 et AWS Graviton
Empathic Computing: Creating Shared Understanding
VMware vSphere Foundation How to Sell Presentation-Ver1.4-2-14-2024.pptx
Network Security Unit 5.pdf for BCA BBA.
Review of recent advances in non-invasive hemoglobin estimation
Build a system with the filesystem maintained by OSTree @ COSCUP 2025
[발표본] 너의 과제는 클라우드에 있어_KTDS_김동현_20250524.pdf
Spectral efficient network and resource selection model in 5G networks
Reach Out and Touch Someone: Haptics and Empathic Computing
“AI and Expert System Decision Support & Business Intelligence Systems”
Shreyas Phanse Resume: Experienced Backend Engineer | Java • Spring Boot • Ka...
7 ChatGPT Prompts to Help You Define Your Ideal Customer Profile.pdf
Understanding_Digital_Forensics_Presentation.pptx
NewMind AI Monthly Chronicles - July 2025
Mobile App Security Testing_ A Comprehensive Guide.pdf
Machine learning based COVID-19 study performance prediction
Electronic commerce courselecture one. Pdf
KodekX | Application Modernization Development
PA Analog/Digital System: The Backbone of Modern Surveillance and Communication
GDG Cloud Iasi [PUBLIC] Florian Blaga - Unveiling the Evolution of Cybersecur...

10 performance and scalability secrets of ASP.NET websites

  • 1. 10 Performance and Scalability secrets of ASP.NET websitesLessons learnt from scaling a Web 2.0 app to millions of usersOmar AL ZabirChief Architect, SaaS Platform, BTomaralzabir.comomaralzabir@gmail.comTwitter.com/omaralzabirBook “Building Web 2.0 portal using ASP.NET 3.5” from O’Reilly
  • 2. How to blow up a websiteGet some super fast fiber broadband connection.Run this on couple of quad core desktops:for (int j = 0; j < 100; j ++){ for (inti = 0; i < 100; i ++) {var client = new WebClient();client.DownloadStringAsync( new Uri("http://www.microsoft.com/MISReport.aspx"); }Thread.Sleep(500);}
  • 3. Prevent App Level DOS attackApplication Level DOS attacks are attempts to hit your expensive pages too frequently so that you have 100% CPU and your site goes down. For ex, hitting some expensive Report page continuously.You can run out of ASP.NET Threads and stop responding completely to any request.I’m not talking about Network level DOS attacks like TCP SYN flood or DDOS attacks that hardware firewalls can prevent.Firewalls don’t block legitimate requests.
  • 4. Prevent App level DOS attacksProtect only expensive pages. Pages that are unlikely to get hit too many times within a short duration.Build a HttpModuleand hook on OnInitevent.Store which IP is making how many number of hits in last 10 minutes. Store the table in some in-memory cache.If the threshold has exceeded, stop responding to that IP. Call Response.End()Solution is here:http://tinyurl.com/omarDOS
  • 5. ASP.NET ProcessModel OptimizationASP.NET ProcessModel DefaultsmaxWorkerThreads = 20maxIOThreads = 20memoryLimit = 60Nowadays, servers are way too powerful. You don’t need to be conservative.Change default process model setting in machine.config to make best use of CPU power.
  • 6. ASP.NET Pipeline OptimizationDefault ASP.NET Pipeline has several components that intercept each and every request. Thus they add extra processing overhead on every request.Multiply the overhead by hundreds of requests per second – you get a significant overhead.
  • 7. ASP.NET Pipeline OptimizationRemove what you don’t need.If you are using Forms Authentication, SQL Server storage, no web.config based role based permission then you can remove most of them:
  • 8. Prevent large ASP.NET cookies on static contentEach and every request, even static files, get the ASP.NET cookies sent.517 bytes of worthless data per request.Avg pages have 40 resources. 40 x 517 = 20 KB.1M page view = 20 GB of data upload to server.Cookie:.DBANON=w3kYczsH8Wvzs6MgryS4JYEF0N-8ZR6aLRSTU9KwVaGaydD6WwUHD7X9tN8vBgjgzKf3r3SJHusTYFjU85yYfnunyCeuExcZs895JK9Fk1HS68ksGwm3QpxnRZvpDBAfJKEUKee2OTlND0gi43qwwtIPLeY1; ASP.NET_SessionId=bmnbp155wilotk45gjhitoqg; .DBAUTH12=2A848A8C200CB0E8E05C6EBA8059A0DBA228FC5F6EDD29401C249D237812344C15B3C5C57D6B776037FAA8F14017880E57BDC14A7963C58B0A0B30229AF0123A6DF56601D814E75525E7DCA9AD4A0EF200832B39A1F35A5111092F0805B0A8CD3D2FD5E3AB6176893D86AFBEB68F7EA42BE61E89537DEAA3279F3B576D0C44BA00B9FA1D9DD3EE985F37B0A5A134ADC0EA9C548D
  • 9. Prevent ASP.NET cookies on static contentSetup a new website in IIS, map to the same code folder.Map static.yoursite.com host header to that website.Prefix all css, js, image links with http://static.yoursite.com/Add a Global.asax’sEndResponseevent on the new website.HttpContext context = HttpContext.Current;List<string> cookiesToClear = new List<string>();foreach(string cookieName in context.Request.Cookies){HttpCookiecookie = context.Request.Cookies[cookieName];cookiesToClear.Add(cookie.Name);}foreach(string name in cookiesToClear){HttpCookiecookie = new HttpCookie(name, string.Empty);cookie.Expires= DateTime.Today.AddYears(-1);context.Response.Cookies.Set(cookie);}
  • 10. System.net optimizationIf you are using HttpWebRequest or WebClient or any other TCP/IP operation, increase the max connection limit.Default is 2 per IP.WCF service calls are limited by this setting.Unless you suspect rogue clients, set some reasonably high number on webservers, but moderate number on desktop clients.
  • 11. System.net default setting is suboptimalBottleneckMax 2 concurrent calls
  • 12. ASP.NET Profile ProviderAnonymous Provider creates one anonymous user in database on every first hit to Profile object’s Custom properties:The SP aspnet_Profile_GetProperties gets called when you access Profile object for first time in a request. And this SP is slooooooooow!
  • 13. ASP.NET Profile ProviderThe slow SP that gets fired when you access custom Profile properties:CREATE PROCEDURE [dbo].[aspnet_Profile_GetProperties] @ApplicationNamenvarchar(256),ASBEGIN DECLARE @ApplicationIduniqueidentifier SELECT @ApplicationId = NULL SELECT @ApplicationId = ApplicationId FROM dbo.aspnet_ApplicationsWHERE LOWER(@ApplicationName) = LoweredApplicationName……… IF (@@ROWCOUNT > 0) BEGINUPDATE dbo.aspnet_Users SET LastActivityDate=@CurrentTimeUtc WHERE UserId = @UserId ENDEND
  • 14. ASP.NET Profile ProviderThe slow SP’s execution plan
  • 15. ASP.NET Profile ProviderDon’t update LastActivityDate when Profile object is loaded. Do it only when Profile object is updated.Update once every hour or so. If LastActivityDate < DateTime.Now.AddHours(-1) then update. No need to do per request or too frequently.Hard code the Application ID to avoid one lookup inside the SP.tinyurl.com/omarGetProp
  • 16. ASP.NET MembershipASP.NET Membership Provider Stored Procs use default transaction isolation level, which is Serializable.Transaction (Process ID ##) was deadlocked on lock resources with another process and has been chosen as the deadlock victim. Rerun the transaction.Timeout Expired. The Timeout Period Elapsed Prior To Completion Of The Operation Or The Server Is Not Responding.ALTER PROCEDURE [dbo].[aspnet_Profile_GetProperties]@ApplicationNamenvarchar(256),@UserNamenvarchar(256),@CurrentTimeUtcdatetimeASBEGINSET TRANSACTION ISOLATION LEVEL READ UNCOMMITTED;
  • 17. ASP.NET Membership QueryCommon queries that brings down hell:Select * from aspnet_users where UserName = ‘blabla’Select * from aspnet_membership where Email = “someone@somewhere.com”What’s wrong with these queries?
  • 18. ASP.NET Membership QueriesLet's look at the indexes: Table: aspnet_usersClustered Index = ApplicationID, LoweredUserNameNonClustered Index = ApplicationID, LastActivityDatePrimary Key = UserIDTable: aspnet_membershipClustered Index = ApplicationID, LoweredEmailNonClustered = UserIDTable: aspnet_ProfileClustered Index = UserIDDO NOT use Email or UserName fields in WHERE clause. They are not part of the index instead LoweredUserName and LoweredEmail fields are in conjunction with ApplicationID field. All queries must have ApplicationID in the WHERE clause.
  • 19. A love story.NET 3.0 was released, woohoo!WCF!Lambda Expressions!!Linq to SQL!!!Upgraded to .NET 3.0, top to bottom.Major deployment over the weekend.Monday 9 AM, peak traffic.No response from site.
  • 20. ~100% on all web servers
  • 21. Linq to SQL is not suitable for high volume web applicationsLinq to SQL is not optimized for web application.No disconnected entity support.Entities are not serializable.Linq to sql expressions consume high CPU when compiled to SQL.var query = from widget in dc.Widgetswhere widget.ID == id && widget.PageID == pageIdselect widget;var widget = query.SingleOrDefault();
  • 22. How bad Linq to SQL is?Source: JD Conley’s blog
  • 23. Fixing Linq to SQLConvert all queries to Compiled Queries.tinyurl.com/omarLINQ
  • 24. Linq to SQL transaction deadlocksLarge table, high read and medium write, causes query timeouts, high locks, transaction deadlock because of SERIALIZATION isolation level.Transaction (Process ID ##) was deadlocked on lock resources with another process and has been chosen as the deadlock victim. Rerun the transaction.Timeout Expired. The Timeout Period Elapsed Prior To Completion Of The Operation Or The Server Is Not Responding.using (vardb= new YourDataContext2()) { db.Connection.Open(); db.ExecuteCommand("SET TRANSACTION ISOLATION LEVEL READ UNCOMMITTED;"); varuser = db.aspnet_Users.First(); varpages = user.Pages.ToList(); }
  • 25. Linq to SQL transaction deadlocksConnection does not close!Bug in Data Context code.Solution is to override the Dispose.class YourDataContext2 : YourDataContext, IDisposable{public new void Dispose() { if (base.Connection!= null) if (base.Connection.State!= System.Data.ConnectionState.Closed) { base.Connection.Close(); base.Connection.Dispose(); } base.Dispose(); } }
  • 26. Content Delivery Network (CDN)CDN cache and deliver content from their servers that are closest to users’ computers. The closer servers are to end user, the shorter roundtrip time for every request. For ex, Akamai has servers almost every city in the world.Content from CDN nodes get served faster with lower latency than coming from your servers.CDN Nodes have better caching and compression algorithms.CDN nodes can offload your server and network from delivering static files. Thus better throughput for dynamic content.
  • 27. Content Delivery Network0.7 secWashington, DC2.2 secAustralia
  • 29. Two types of CDNStatic – you upload the files to CDN and they give you an URL. E.g. yoursite.cachefly.net/logo.gifDynamic – Host your dynamic application behind the CDN. For ex, Edgecast and Panther Express.Very cheap - $0.2/GB
  • 30. How Dynamic CDN workswww.yoursite.comStatic content cached,Compressed automatically
  • 31. 13 disasters for production websitesFaulty hard drive supplied by supplier, data corruption within weeks. Controller malfunctions and corrupts all disks in the same controller.RAID malfunction.CPU overheated and burned out.Firewall went down.Remote Desktop stopped working after a patch installation.Remote Desktop max connection exceeded. Cannot login anymore to servers.Database got corrupted while we were moving the production database from one server to another over the network.One developer deleted the production database accidentally while doing routine work.Support crew at hosting service formatted our running production server instead of a corrupted server that we asked to format.Windows got corrupted and was not working until we reinstalled.DNS goes down. Don’t get domain from GoDaddy.Internet backbone goes down in different part of the world.http://tinyurl.com/omar13
  • 32. ConclusionASP.NET out of the box, does not scale for millions of hits.Must make the hacks at code, database and configuration level to get it to scale.That’s reality for any technology, not ASP.NET specific.